PT-2023-8598

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 14.10.1 XWiki Platform versions prior to 15.0-rc-1 Description The issue is related to insufficient access control in the XWiki Platform, allowing a remote attacker to create a new user. This can be achieved by...

CVE-2023-29513: Improper Access Control

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has view right on any document. It's possible to create a new user using the distribution/firstadminuser.wiki in the wrong context. This vulnerability has been patched in XWiki...