Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-messagestream

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.7

    XWiki allows unregistered users to see "public" messages from a closed wiki via notifications from a different wiki

    XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Stream enabled and a wiki configured as closed from selecting "Prevent unregistered users to view pages" in the Administrations Rights. The vu…