6.0.1

DATE	CVE	VULNERABILITY TITLE	RISK
2020-10-16	CVE-2020-15252	Injection vulnerability in Xwiki In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution. network low complexity xwiki CWE-74 critical	9.0
2020-09-10	CVE-2020-15171	Injection vulnerability in Xwiki In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution. network xwiki CWE-74	6.0