CVE-2023-34466 XWiki Platform's tags on non-viewable pages can be revealed to users

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.0-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, tags from pages not viewable to the current user are leaked by the tags API. This information can also...

CVE-2023-34466

CVE-2023-34466 affects XWiki Platform’s tag API. The vulnerability leaks tags from pages not viewable to the current user, enabling inference of the document reference for non-viewable pages. Affected versions are 5.0-milestone-1 up to 14.4.8, 14.10.4, and 15.0-rc-1. The issue is resolved in the ...