CVE-2024-46978

Maven/org.xwiki.platform:xwiki-platform-notifications-ui CVE-2024-46978: medium 6.5, EPSS 0.52%

org.xwiki.platform:xwiki-platform-notifications-ui is missing checks for notification filter preferences editions

Action: Upgrade org.xwiki.platform:xwiki-platform-notifications-ui to 14.10.21 (14.10.x), 15.5.5 (15.5.x) or 15.10.1 (15.10.x) or later.

Affected

Fixed versions

Sources

• osv: GHSA-r95w-889q-x2gx
• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r95w-889q-x2gx
• https://nvd.nist.gov/vuln/detail/CVE-2024-46978
• https://github.com/xwiki/xwiki-platform/commit/4771573dac88e0cf04e30f1a8dfa183c048d503a
• https://github.com/xwiki/xwiki-platform/commit/99193a7e9a203b5bb8b2583ac96f5f4d56b9aa1a
• https://github.com/xwiki/xwiki-platform/commit/b9180b874a22e383ad5f2cd9e25bfed4594d4955
• https://github.com/xwiki/xwiki-platform/commit/e8acc9d8e6af7dfbfe70716ded431642ae4a6dd4
• https://github.com/xwiki/xwiki-platform
• https://jira.xwiki.org/browse/XWIKI-20337

CVE-2024-46978 · published 2024-09-18T14:26:16Z · modified 2024-11-18T16:27:14Z · JSON