CVE-2022-41935

CVE-2022-41935 affects XWiki Platform and targets the LiveTable UI component, where a lack of proper cleanup of obfuscated entries in Livetable responses allows users without view rights to deduce existence of documents. Vulnerable entries are exposed via Livetable queries; patches exist in XWiki...

CVE-2022-41935 Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users without the right to view documents can deduce their existence by repeated Livetable queries. The issue has been patched in XWiki 14.6RC1, 13.10.8, and 14.4.3, the response is not proper...

CVE-2022-41935 Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users without the right to view documents can deduce their existence by repeated Livetable queries. The issue has been patched in XWiki 14.6RC1, 13.10.8, and 14.4.3, the response is not proper...

GHSA-P2X4-6GHR-6VMQ Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui

Impact User without the right to view documents can deduce their existence by repeated Livetable queries. Reproduction steps 1. Restrict "view" access to Sandbox.TestPage3 by setting an explicit view right for admins 1. As a user who is not an admin, open...

Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui

Impact User without the right to view documents can deduce their existence by repeated Livetable queries. Reproduction steps 1. Restrict "view" access to Sandbox.TestPage3 by setting an explicit view right for admins 1. As a user who is not an admin, open...

PT-2022-26166 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.6RC1 XWiki Platform versions prior to 13.10.8 XWiki Platform versions prior to 14.4.3 Description: The issue allows users without the right to view documents to deduce their existence by repeated Livetable...