CVE-2022-41936

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 13.10.8 XWiki Platform versions prior to 14.4.3 XWiki Platform versions prior to 14.6

Description The modifications rest endpoint does not filter out entries according to the user's rights, exposing information hidden from unauthorized users, such as comments and page names.

Recommendations For versions prior to 13.10.8, upgrade to XWiki 13.10.8 or later. For versions prior to 14.4.3, upgrade to XWiki 14.4.3 or later. For versions prior to 14.6, upgrade to XWiki 14.6 or later.