{"action":"Upgrade org.xwiki.commons:xwiki-commons-core to 11.10.13 (11.10.x), 12.6.7 (12.6.x) or 12.10.2 (12.10.x) or later.","affected":[{"fixed":"11.10.13","introduced":"11.6"},{"fixed":"12.6.7","introduced":"12.0"},{"fixed":"12.10.2","introduced":"12.10.0"}],"component":"org.xwiki.commons:xwiki-commons-core","cve_ids":["CVE-2021-32620"],"ecosystem":"Maven","epss":0.01132,"exploited":false,"fixed_versions":["11.10.13","12.6.7","12.10.2"],"ghsa_id":"GHSA-76mp-659p-rw65","id":"tcs_01M5N8HM7NN3PTGC3W9BPAQ2R0","modified_at":"2026-07-08T06:28:14.532272320Z","published_at":"2021-05-18T18:36:21Z","references":["https://osv.dev/vulnerability/GHSA-76mp-659p-rw65","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-76mp-659p-rw65","https://nvd.nist.gov/vuln/detail/CVE-2021-32620","https://github.com/xwiki/xwiki-platform/commit/f9a677408ffb06f309be46ef9d8df1915d9099a4","https://github.com/xwiki/xwiki-commons","https://jira.xwiki.org/browse/XWIKI-17942"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-76mp-659p-rw65","url":"https://osv.dev/vulnerability/GHSA-76mp-659p-rw65"}],"summary":"XWiki users registered with email verification can self re-activate their disabled accounts"}