| Package | Affected versions | Patched versions |
|---|---|---|
| org.xwiki.platform:xwiki-platform-oldcore | < 14.0-rc-1 | 14.0-rc-1 |
| xwiki | < 14.0 | 14.0 |
It's possible to make the farm unusable by adding an object to a page with a huge number (e.g. 67108863). This will most of the time fill the memory allocated to XWiki and make it unusable every time this document is manipulated.
It has been patched in XWiki 14.0
There is no workaround.
https://jira.xwiki.org/browse/XWIKI-19223
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free