Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85549
HistoryNov 24, 2022 - 12:00 a.m.

XWiki Platform information leakage vulnerability

2022-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
xwiki platform
information leakage
vulnerability
web collaboration applications
french company
versions
information disclosure

0.001 Low

EPSS

Percentile

45.2%

XWiki Platform is a Wiki platform for creating Web collaboration applications from the French company XWiki. XWiki Platform 8.1 and later, versions prior to 13.10.8, 14.0 and later, 14.4.3 and later, 14.5 and later, and 14.6 and earlier are vulnerable to an information disclosure vulnerability that stems from The modifications rest endpoint fails to filter effectively based on the user’s permissions, and an attacker can exploit the vulnerability to obtain sensitive information.

0.001 Low

EPSS

Percentile

45.2%