CVE-2022-41936: Exposure of Private Personal Information to an Unauthorized Actor

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The modifications rest endpoint does not filter out entries according to the user's rights. Therefore, information hidden from unauthorized users are exposed though the modifications rest...

CVE-2022-41936

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The "modifications" rest endpoint does not filter out entries according to the user's rights. Therefore, information hidden from unauthorized users are exposed though the "modifications" rest...

PT-2022-26167

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 13.10.8 XWiki Platform versions prior to 14.4.3 XWiki Platform versions prior to 14.6 Description The modifications rest endpoint does not filter out entries according to the user's rights, exposing information...