CVE-2022-23617
1 advisory.
Maven/org.xwiki.platform:xwiki-platform-oldcore CVE-2022-23617: medium 6.5
Missing authorization in xwiki-platform
Action: Upgrade org.xwiki.platform:xwiki-platform-oldcore to 12.10.6 (12.x) or 13.2-rc-1 (13.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.10.6 | - |
| 13.0 | 13.2-rc-1 | - |
Fixed versions
| 12.10.6 | 13.2-rc-1 |
Sources
- osv: GHSA-gf7x-2j2x-7f73
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gf7x-2j2x-7f73
- https://nvd.nist.gov/vuln/detail/CVE-2022-23617
- https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5
- https://github.com/xwiki/xwiki-platform/commit/b35ef0edd4f2ff2c974cbeef6b80fcf9b5a44554
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-18430
CVE-2022-23617 · published · modified · JSON