CVE-2022-31167 XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference

🗓️ 07 Sep 2022 13:55:11Reported by GitHub_MType

XWiki Platform Security Parent POM vulnerability, allows overwriting of security rules for a page with the same referenc

Reporter	Title	Published	Views	Family All 12
CNNVD	XWiki Platform 安全漏洞	7 Sep 202200:00	–	cnnvd
CVE	CVE-2022-31167	7 Sep 202213:55	–	cve
EUVD	EUVD-2022-6821	3 Oct 202520:07	–	euvd
Github Security Blog	XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference	20 Sep 202221:18	–	github
NVD	CVE-2022-31167	7 Sep 202214:15	–	nvd
OpenVAS	XWiki 5.0 < 12.10.11, 13.0 < 13.4.6, 13.5 < 13.10.1 Improper Authorization Vulnerability (GHSA-gg53-wf5x-r3r6)	13 Sep 202200:00	–	openvas
OSV	CVE-2022-31167 XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference	7 Sep 202213:55	–	osv
OSV	GHSA-GG53-WF5X-R3R6 XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference	20 Sep 202221:18	–	osv
Prion	Design/Logic Flaw	7 Sep 202214:15	–	prion
Positive Technologies	PT-2022-20581 · Xwiki · Xwiki Platform Security Parent Pom	7 Sep 202200:00	–	ptsecurity

[
  {
    "product": "xwiki-platform",
    "vendor": "xwiki",
    "versions": [
      {
        "status": "affected",
        "version": ">= 5.0, < 12.10.11"
      },
      {
        "status": "affected",
        "version": ">= 13.0, < 13.4.6"
      },
      {
        "status": "affected",
        "version": ">= 13.10, < 13.10.1"
      }
    ]
  }
]

Source	Link
jira	www.jira.xwiki.org/browse/XWIKI-14075
github	www.github.com/xwiki/xwiki-platform/security/advisories/GHSA-gg53-wf5x-r3r6
jira	www.jira.xwiki.org/browse/XWIKI-18983

07 Sep 2022 13:55Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.1

EPSS0.00645