Lucene search
China National Vulnerability DatabaseCNVD-2022-13412HistoryJul 02, 2021 - 12:00 a.m.
XWiki Platform cross-site request forgery vulnerability
2021-07-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
0.001 Low
EPSS
Percentile
32.0%
XWiki Platform is a generic wiki platform that provides runtime services for applications built on it. XWiki Platform is vulnerable to cross-site request forgery, which can be exploited by attackers to reset the password of any user in XWiki via a spoofed URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| XWiki XWiki Platform | lt | 12.10.5 | |
| XWiki XWiki Platform >=13.0， | le | 13.1 |
Related
prion
prion
Cross site request forgery (csrf)
2021-07-01 18:15:00
cve
cve
CVE-2021-32730
2021-07-01 18:15:07
osv
osv
No CSRF protection on the password change form
2021-07-02 19:19:13
CVE-2021-32730
2021-07-01 18:15:07
nvd
nvd
CVE-2021-32730
2021-07-01 18:15:07
openvas
openvas
XWiki Missing CSRF Protection Vulnerability (GHSA-v9j2-q4q5-cxh4)
2021-07-05 00:00:00
github
github
No CSRF protection on the password change form
2021-07-02 19:19:13
cvelist
cvelist
CVE-2021-32730 No CSRF protection on the password change form
2021-07-01 17:30:13