CVE-2026-48048
1 advisory.
Maven/org.xwiki.platform:xwiki-platform-livetable-ui CVE-2026-48048: high 7.5
XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests
Action: Upgrade org.xwiki.platform:xwiki-platform-livetable-ui to 16.10.17 (16.10.x), 17.4.9 (17.4.x) or 17.10.3 (17.10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.1 | 16.10.17 | - |
| 17.0.0-rc-1 | 17.4.9 | - |
| 17.5.0-rc-1 | 17.10.3 | - |
Fixed versions
| 16.10.17 | 17.4.9 | 17.10.3 |
Sources
- osv: GHSA-rh28-mqj4-8x59
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rh28-mqj4-8x59
- https://github.com/xwiki/xwiki-platform/commit/c4442716b02ffcdaa9d5e703b1db6203e36456fa
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-23875
CVE-2026-48048 · published · modified · JSON