5 matches found
CVE-2022-41936
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The modifications rest endpoint does not filter out entries according to the user's rights. Therefore, information hidden from unauthorized users are exposed though the modifications rest...
CVE-2022-41936
creationtimestamp| type| source ---|---|--- 2022-11-22 07:12:43+00:00| seen| https://t.me/cibsecurity/53301...
CVE-2022-41936
CVE-2022-41936 is an information disclosure vulnerability in XWiki Platform where the REST endpoint /modifications does not filter results by user rights, exposing hidden data (comments, page names, etc.). The affected product is XWiki Platform; root cause is improper permission filtering on the ...
CVE-2022-41936 Exposure of Private Personal Information to an Unauthorized Actor in xwiki-platform-rest-server
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The modifications rest endpoint does not filter out entries according to the user's rights. Therefore, information hidden from unauthorized users are exposed though the modifications rest...
CVE-2022-41936 Exposure of Private Personal Information to an Unauthorized Actor in xwiki-platform-rest-server
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The modifications rest endpoint does not filter out entries according to the user's rights. Therefore, information hidden from unauthorized users are exposed though the modifications rest...