Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-user-profile-ui

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-41930

    org.xwiki.platform:xwiki-platform-user-profile-ui missing authorization to enable or disable users

    org.xwiki.platform:xwiki-platform-user-profile-ui is missing authorization to enable or disable users. Any user (logged in or not) with access to the page XWiki.XWikiUserProfileSheet can enable or disable any user profile. This might allow to a disabled user …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-user-profile-ui Maven