Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-mail-send-default

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    CVE-2023-34465

    XWiki Platform's Mail.MailConfig can be edited by any user with edit rights

    XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2, `Mail.MailConfig` can be edited by any logged-in user by default. Consequently, they can change the mail obfuscation configuration and vi…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-mail-send-default Maven