CVE-2023-38509: Transmission of Private Resources into a New Sphere

XWiki Platform is a generic wiki platform. In org.xwiki.platform:xwiki-platform-livetable-ui starting with version 3.5-milestone-1 and prior to versions 14.10.9 and 15.3-rc-1, the mail obfuscation configuration was not fully taken into account and is was still possible by obfuscated emails. This...

PT-2023-4816

Name of the Vulnerable Software and Affected Versions XWiki Platform versions 3.5-milestone-1 through 14.4.7 XWiki Platform versions 14.5.0 through 14.10.3 XWiki Platform versions 15.0-rc-0 Description The mail obfuscation configuration was not fully taken into account, allowing users to infer th...

CVE-2022-41935: Exposure of Sensitive Information to an Unauthorized Actor

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users without the right to view documents can deduce their existence by repeated Livetable queries. The issue has been patched in XWiki 14.6RC1, 13.10.8, and 14.4.3, the response is not proper...