CVE-2021-32731
1 advisory.
Maven/org.xwiki.platform:xwiki-platform-web CVE-2021-32731: medium 5.3, EPSS 1.20%
The reset password form reveal users email address
Action: Upgrade org.xwiki.platform:xwiki-platform-web to 13.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.1 | 13.2 | - |
Fixed versions
| 13.2 |
Sources
- osv: GHSA-h4m4-pgp4-whgm
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h4m4-pgp4-whgm
- https://nvd.nist.gov/vuln/detail/CVE-2021-32731
- https://github.com/xwiki/xwiki-platform/commit/0cf716250b3645a5974c80d8336dcdf885749dff#diff-14a3132e3986b1f5606dd13d9d8a8bb8634bec9932123c5e49e9604cfd850fc2
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-18400
CVE-2021-32731 · published · modified · JSON