CVE-2022-31167
1 advisory.
Maven/org.xwiki.platform:xwiki-platform-security CVE-2022-31167: high 7.1
XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference
Action: Upgrade org.xwiki.platform:xwiki-platform-security to 12.10.11 (12.10.x), 13.4.6 (13.4.x) or 13.10.1 (13.10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0 | 12.10.11 | - |
| 13.0 | 13.4.6 | - |
| 13.10 | 13.10.1 | - |
Fixed versions
| 12.10.11 | 13.4.6 | 13.10.1 |
Sources
- osv: GHSA-gg53-wf5x-r3r6
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gg53-wf5x-r3r6
- https://nvd.nist.gov/vuln/detail/CVE-2022-31167
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-14075
- https://jira.xwiki.org/browse/XWIKI-18983
CVE-2022-31167 · published · modified · JSON