PT-2022-26167
CVE-2022-41936
·
تاريخ النشر
2022-11-21
·
تاريخ التحديث
2022-11-28
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
XWiki Platform versions prior to 13.10.8
XWiki Platform versions prior to 14.4.3
XWiki Platform versions prior to 14.6
Description
The
modifications rest endpoint does not filter out entries according to the user's rights, exposing information hidden from unauthorized users, such as comments and page names.Recommendations
For versions prior to 13.10.8, upgrade to XWiki 13.10.8 or later.
For versions prior to 14.4.3, upgrade to XWiki 14.4.3 or later.
For versions prior to 14.6, upgrade to XWiki 14.6 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾