Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/14 10:34 p.m.16 views

XWiki's REST APIs can list all pages/spaces, leading to unavailability

Impact REST API endpoints like /xwiki/rest/wikis/xwiki/spaces/AnnotationCode/pages/AnnotationConfig/objects/AnnotationCode.AnnotationConfig/0/properties list all available pages as part of the metadata for database list properties, which can exhaust available resources on large wikis. Patches Thi...

8.2CVSS5.7AI score0.004EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder