1 matches found
Exposure of Private Personal Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-rest-server
Impact The modifications rest endpoint does not filter out entries according to the user's rights. Therefore, information hidden from unauthorized users are exposed though the modifications rest endpoint e.g., comments, page names.... Patches Users should upgrade to XWiki 14.6+, 14.4.3+,...
7.5CVSS7.2AI score0.00722EPSS
SaveExploits0References5Affected Software1
20