Advisories · Technology
xwikisas macro-pdfviewer.
Every CVE that names xwikisas macro-pdfviewer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
macro-pdfviewer's preview in WYSIWYG editor allows accessing any PDF document as the last author
- xwikisas macro-pdfviewer
- CWE-615
- CVSS 7.5 High
The PDF viewer macro allows accessing any attachment without access right checks
- xwikisas macro-pdfviewer
- CWE-340
- CVSS 9.1 CriticalCritical · CVSS 9+
macro-pdfviewer has a XSS through the width parameter
- xwikisas macro-pdfviewer
- Cross-site scripting (XSS)
- CVSS 7.7 High
The PDF Viewer macro can be used to view PDF attachments with restricted access
- xwikisas macro-pdfviewer
- Information disclosure