Log inSkip to main contentSkip to sidebar
Loading…
XWiki.org JIRA
  • Dashboards
  • Projects
  • Issues
  • Give feedback to Atlassian
  • Help
    • Jira Core help
    • Keyboard Shortcuts
    • About Jira
    • Jira Credits
  • Log In

Export - CSV (All fields)

Export - CSV (Current fields)

Comma (,) Semicolon (;) Vertical bar (|) Caret (^)

  1. Bug XWIKI-20854
    Reflected XSS in the create document form if name validation is enabled
  2. Bug XWIKI-20852
    Groovy jobs check the wrong author, allowing remote code execution
  3. Bug XWIKI-20851
    CSRF in the job scheduler
  4. Bug XWIKI-20849
    CSRF privilege escalation/RCE via the create action
  5. Bug XWIKI-20848
    Velocity execution without script right through VelocityCode property
  6. Bug XWIKI-20847
    Velocity execution without script right through VelocityWiki property
  7. Bug XWIKI-20818
    Cookies are sent to external images in rendered diff (and server side request forgery)
  8. Bug XWIKI-20817
    The diff displays deleted revisions without additional right check
  9. Bug XWIKI-20746
    Privilege escalation (PR) from account through Menu.UIExtensionSheet
  10. Bug XWIKI-20715
    Arbitrary server side file writing from account through office converter
  11. Bug XWIKI-20685
    No extra right check in script API when accessing deleted documents
  12. Bug XWIKI-20684
    Comments of deleted documents can be viewed through REST API
  13. Bug XWIKI-20625
    Velocity execution without script right through tree macro
  14. Bug XWIKI-20624
    Privilege escalation from script right to programming right through title displayer
  15. Bug XWIKI-20611
    Privilege escalation (PR) from account through like LiveTableResults
  16. Bug XWIKI-20610
    Privilege escalation (PR) from account through NotificationRSSService
  17. Bug XWIKI-20594
    Upgrading doesn't prevent exploiting vulnerable XWiki documents
  18. Bug XWIKI-20524
    Privilege escalation (PR) from edit right to programming right through icon themes
  19. Bug XWIKI-20457
    Privilege escalation (PR) from view right via SkinsCode.XWikiSkinsSheet
  20. Bug XWIKI-20456
    Privilege escalation (PR) from view right on XWiki.ClassSheet
  21. Bug XWIKI-20449
    Server side request forgery (SSRF) with the Office Viewer
  22. Bug XWIKI-20423
    Privilege escalation (PR)/RCE from account through AWM view sheet
  23. Bug XWIKI-20421
    Privilege escalation (PR)/RCE from account through Invitation subject/message
  24. Bug XWIKI-20394
    Async and display macro allow displaying and interacting with any document in restricted mode
  25. Bug XWIKI-20386
    CSRF privilege escalation/RCE via the edit action
  26. Bug XWIKI-20385
    Privilege escalation/RCE via the edit action
  27. Bug XWIKI-20373
    Privilege escalation via properties with wiki syntax that are executed with the wrong author
  28. Bug XWIKI-20327
    Privilege escalation (PR) from account through XWiki syntax injection in cleaned HTML macro
  29. Bug XWIKI-20313
    Privilege escalation (PR) from account through UIX and cleaned HTML macros
  30. Bug XWIKI-20306
    Privilege escalation (PR) from account through IncludedDocuments panel
  31. Bug XWIKI-20297
    Privilege escalation (PR) from view right on WikiManager.DeleteWiki
  32. Bug XWIKI-20295
    Privilege escalation (PR) from account through XWiki.SchedulerJobSheet
  33. Bug XWIKI-20294
    Privilege escalation (PR) from account through PanelsCode.ApplicationsPanelConfigurationSheet
  34. Bug XWIKI-20293
    Privilege escalation (PR) from account through IncludedPagesDocumentInformation panel
  35. Bug XWIKI-20291
    CSRF RCE vulnerability in the logger level configuration
  36. Bug XWIKI-20290
    Stored XSS via the user account and displaycontent/rendercontent template
  37. Bug XWIKI-20287
    Privilege escalation (PR) from view right on XWiki.Notifications.Code.LegacyNotificationAdministration
  38. Bug XWIKI-20285
    Privilege escalation (PR) from view right via Invitation application
  39. Bug XWIKI-20283
    Privilege escalation (PR) from view right using Invitation.InvitationCommon
  40. Bug XWIKI-20281
    Privilege escalation (PR) from account through TipsPanel
  41. Bug XWIKI-20280
    Privilege escalation (PR) from account through FlamingoThemesCode.WebHomeSheet
  42. Bug XWIKI-20279
    Privilege escalation (PR) from view right on FlamingoThemesCode.WebHome
  43. Bug XWIKI-20276
    Stored XSS via the timezone displayer in user profile
  44. Bug XWIKI-20275
    Privilege escalation (PR) from view right on XWiki.AttachmentSelector
  45. Bug XWIKI-20268
    Privilege escalation (PR) from account through AdminTemplatesSheet
  46. Bug XWIKI-20267
    Privilege escalation (PR) from account through AdminImportSheet/importinline.vm
  47. Bug XWIKI-20261
    Privilege escalation (PR) from account/view through AdminFieldsDisplaySheet and admin.vm
  48. Bug XWIKI-20260
    Privilege escalation (PR) from account/view through VFS Tree macro
  49. Bug XWIKI-20259
    Privilege escalation (PR) from account/view through Notification Preferences Macros
  50. Bug XWIKI-20258
    Privilege escalation (PR) from account/view through the Legacy ActivityMacro
Refresh results
<< Previous 1 2
{"errorMessages":["You are not authorised to perform this operation. Please log in."],"errors":{}}
[{"id":-1,"name":"My open issues","jql":"assignee = currentUser() AND resolution = Unresolved order by updated DESC","isSystem":true,"sharePermissions":[],"requiresLogin":true},{"id":-2,"name":"Reported by me","jql":"reporter = currentUser() order by created DESC","isSystem":true,"sharePermissions":[],"requiresLogin":true},{"id":-4,"name":"All issues","jql":"order by created DESC","isSystem":true,"sharePermissions":[],"requiresLogin":false},{"id":-5,"name":"Open issues","jql":"resolution = Unresolved order by priority DESC,updated DESC","isSystem":true,"sharePermissions":[],"requiresLogin":false},{"id":-9,"name":"Done issues","jql":"statusCategory = Done order by updated DESC","isSystem":true,"sharePermissions":[],"requiresLogin":false},{"id":-3,"name":"Viewed recently","jql":"issuekey in issueHistory() order by lastViewed DESC","isSystem":true,"sharePermissions":[],"requiresLogin":false},{"id":-6,"name":"Created recently","jql":"created >= -1w order by created DESC","isSystem":true,"sharePermissions":[],"requiresLogin":false},{"id":-7,"name":"Resolved recently","jql":"resolutiondate >= -1w order by updated DESC","isSystem":true,"sharePermissions":[],"requiresLogin":false},{"id":-8,"name":"Updated recently","jql":"updated >= -1w order by updated DESC","isSystem":true,"sharePermissions":[],"requiresLogin":false}]
0.3
0
  • Atlassian Jira Project Management Software
  • About Jira
  • Report a problem

Powered by a free Atlassian Jira open source license for XWiki.org. Try Jira - bug tracking software for your team.

Atlassian