Description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| xwiki | xwiki-platform | >= 13.0.0, < 13.2-rc-1, < 12.10.6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.xwiki.platform:xwiki-platform-oldcore | < 12.10.6 | 12.10.6 | GHSA-gf7x-2j2x-7f73 |
| Maven | org.xwiki.platform:xwiki-platform-oldcore | >= 13.0, < 13.2-rc-1 | 13.2-rc-1 | GHSA-gf7x-2j2x-7f73 |