Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/26 8:16 p.m.14 views

GHSA-RH28-MQJ4-8X59 XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

Impact XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient and with slightly modified parameters to the LiveTableResults, it is still possible to discover password hashes one bit at a time, so with 768 requests, the full password salt and hash can be retrieved of a user...

7.5CVSS5.7AI score0.0036EPSS
SaveExploits0References4
Rows per page
Query Builder