CVE-2022-36091

XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. Through the suggestion feature, string and list properties of objects the user shouldn't have access to can be accessed in versions prior to 13.10.4 and 14.2. This includes private personal information like...

CVE-2022-36091

Summary: CVE-2022-36091 affects XWiki Platform Web Templates, where the suggestion feature could disclose string/list properties from objects to unauthorized users in versions before 13.10.4 and 14.2. This includes private data (emails, salted password hashes) and other property values, as well a...