Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85529
HistoryNov 25, 2022 - 12:00 a.m.

XWiki Platform information leakage vulnerability

2022-11-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
xwiki platform
information leakage
vulnerability
plaintext password
database
attacker
sensitive information

0.002 Low

EPSS

Percentile

51.9%

XWiki Platform is a Wiki platform for creating Web collaboration applications from the French company XWiki. XWiki Platform is vulnerable to information leakage, which stems from the fact that when using XWiki’s “reset forgotten password” feature, passwords are stored in the database in plaintext. An attacker could use this vulnerability to obtain sensitive information.

0.002 Low

EPSS

Percentile

51.9%