CVE-2022-23617CWE-862

Missing authorization in xwiki-platform

Medium · published February 9, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00945 · 60.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-02-09T21:00Z
EPSS history
Timeline
  • 09 FEB 21:00Z
    Missing authorization in xwiki-platform
    cvelistv5