Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-web-templates

23 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm

    XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally not viewable from subwiki by requesting users on a subwiki which allows only global users with `uorgsuggest.vm`. This iss…