Threats tagged 'ghsa-42fc-7w97-8vrc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.4	CVE-2026-42140Org.xwiki.contrib.plantuml:macro plantuml macro: XWiki PlantUML Macro Vulnerable to Server-Side Request Forgery (SSRF) Medium4.42026-05-05GCVE DatabaseCVE-2026-42140 The PlantUML Macro extension for XWiki is vulnerable to Server-Side Request Forgery (SSRF) due to lack of validation on the 'server' parameter that specifies an alternative PlantUML server. This allows attackers to supply internal or malicious external URLs, causing the XWiki server to connect to unintended targets. Versions prior to 2.4.1 are affected. The issue is fixed in version 2.4.1 by restricting the server parameter to trusted domains configured in XWiki. Report on CVE-2026-42140 Vulnerability CWE-918 #ghsa-42fc-7w97-8vrc #maven	GCVE Database	2026-05-05

Page 1 of 1