GHSA-RP38-24M3-RX87 The lesscss script service allows cache clearing without programming right

Impact The script API of the LESS compiler in XWiki is incorrectly checking for rights when calling the cache cleaning API, making it possible to clean the cache without having programming right. The only impact of this is a slowdown in XWiki execution as the caches are re-filled. As this...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization through the lesscss script service. An attacker can cause a slowdown in XWiki execution by triggering unnecessary cache clearing operations. Remediation Upgrade org.xwiki.platform:xwiki-platform-lesscss-script to...