Skip to content
OpenAdvisories
Medium WID-SEC-2024-2176 2 CVEs

xwiki: Mehrere Schwachstellen

Published Sep 18, 2024 · Updated Sep 18, 2024 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in xwiki ausnutzen, um Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.

Product

XWiki ist eine Open-Source-Wiki-Software-Plattform, für die Erstellung und Verwaltung von Wikis und Knowledge-Management-Systemen

Vulnerabilities 2

  • Medium 6.5
    CVE-2024-46978

    Missing checks for notification filter preferences editions in XWiki Platform

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing the ID of a notification filter preference of another user, to enable/disable it or even delete it. The impact is that …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-notifications-ui Maven
  • Medium 5.3
    CVE-2024-46979

    Data leak of notification filters of users in XWiki Platform

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to get access to notification filters of any user by using a URL such as `<hostname>xwiki/bin/get/XWiki/Notifications/Code/NotificationFilte…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-notifications-ui Maven

Revision history

  1. #1

    Initiale Fassung

References