Описание
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- PatchVendor Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 12.10.5 (включая)
Одно из
cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:13.0:*:*:*:*:*:*:*
cpe:2.3:a:xwiki:xwiki:13.1:-:*:*:*:*:*:*
EPSS
Процентиль: 20%
0.00066
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-862
Связанные уязвимости
EPSS
Процентиль: 20%
0.00066
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-862