Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-search-solr-api

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-50719 Scanner template EPSS 84%

    XWiki Platform Solr search discloses password hashes of all users

    XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. …