CVE-2022-41930: Missing Authorization

org.xwiki.platform:xwiki-platform-user-profile-ui is missing authorization to enable or disable users. Any user logged in or not with access to the page XWiki.XWikiUserProfileSheet can enable or disable any user profile. This might allow to a disabled user to re-enable themselves, or to an attack...

CVE-2022-41930

org.xwiki.platform:xwiki-platform-user-profile-ui is missing authorization to enable or disable users. Any user logged in or not with access to the page XWiki.XWikiUserProfileSheet can enable or disable any user profile. This might allow to a disabled user to re-enable themselves, or to an attack...

PT-2022-26161

Name of the Vulnerable Software and Affected Versions xwiki-platform-user-profile-ui versions prior to 13.10.7 xwiki-platform-user-profile-ui versions prior to 14.4.2 xwiki-platform-user-profile-ui versions prior to 14.5RC1 Description The issue is related to missing authorization in the...