Vulnerability Database
296,772
Total vulnerabilities in the database
CVE-2023-29208
XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for viewing it once it's deleted. Note that this vulnerability only impact deleted documents that where containing view rights: the view rights provided on a space of a deleted document are properly checked. The problem has been patched in XWiki 14.10 by checking the rights of current user: only admin and deleter of the document are allowed to view it.
| Software | From | Fixed in |
|---|---|---|
org.xwiki.platform / xwiki-platform-oldcore
|
1.2-milestone-1 | 13.10.11 |
|
org.xwiki.platform / xwiki-platform-oldcore
|
14.0-rc-1 | 14.4.7 |
|
org.xwiki.platform / xwiki-platform-oldcore
|
14.5 | 14.10 |
| xwiki / xwiki | 14.5 | 14.10 |
| xwiki / xwiki | 14.4.0 | 14.4.7 |
| xwiki / xwiki | 1.1 | 13.10.11 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime