Lucene search
PRIOn knowledge basePRION:CVE-2022-41929HistoryNov 23, 2022 - 7:15 p.m.
Authorization
2022-11-2319:15:00
PRIOn knowledge base
www.prio-n.com
3
authorization
xwiki
user rights
security patch
org.xwiki.platform:xwiki-platform-oldcore is missing authorization in User#setDisabledStatus, which may allow an incorrectly authorized user with only Script rights to enable or disable a user. This operation is meant to only be available for users with admin rights. This problem has been patched in XWiki 13.10.7, 14.4.2 and 14.5RC1.
Related
osv
osv
Missing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore
2022-11-21 22:35:22
CVE-2022-41929
2022-11-23 19:15:12
cve
cve
CVE-2022-41929
2022-11-23 19:15:12
cvelist
cvelist
github
github
openvas
openvas
nvd
nvd
CVE-2022-41929
2022-11-23 19:15:12