CVE-2022-41937
1 advisory.
Maven/org.xwiki.platform:xwiki-platform-filter-ui CVE-2022-41937: critical 9.6
Missing Authorization in Filter Stream Converter Application of XWiki-platform
Action: Upgrade org.xwiki.platform:xwiki-platform-filter-ui to the fixed version for your line (see fixed_versions).
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 13.10.8 | - |
| 14.0.0 | 14.4.3 | - |
| 14.5.0 | 14.6-rc-1 | - |
Fixed versions
| 13.10.8 | 14.4.3 | 14.6-rc-1 |
Sources
- osv: GHSA-q6jp-gcww-8v2j
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-q6jp-gcww-8v2j
- https://nvd.nist.gov/vuln/detail/CVE-2022-41937
- https://github.com/xwiki/xwiki-platform/commit/fb49b4f289ee28e45cfada8e97e320cd3ed27113
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-19758
CVE-2022-41937 · published · modified · JSON