{"action":"Upgrade org.xwiki.platform:xwiki-platform-web-templates to 12.10.11 (12.10.x), 13.4.4 (13.4.x) or 13.9 (13.9.x) or later.","affected":[{"fixed":"12.10.11","introduced":"0"},{"fixed":"13.4.4","introduced":"13.0.0"},{"fixed":"13.9","introduced":"13.5.0"}],"component":"org.xwiki.platform:xwiki-platform-web-templates","cve_ids":["CVE-2022-24819"],"ecosystem":"Maven","epss":0.03198,"exploited":false,"fixed_versions":["12.10.11","13.4.4","13.9"],"ghsa_id":"GHSA-97jg-43c9-q6pf","id":"tcs_01M5N8PF8GS4SZ4F273KQEWA85","modified_at":"2023-11-08T04:08:37.572170Z","published_at":"2022-04-08T21:53:38Z","references":["https://osv.dev/vulnerability/GHSA-97jg-43c9-q6pf","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-97jg-43c9-q6pf","https://nvd.nist.gov/vuln/detail/CVE-2022-24819","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-18850"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-97jg-43c9-q6pf","url":"https://osv.dev/vulnerability/GHSA-97jg-43c9-q6pf"}],"summary":"Unauthenticated user can retrieve the list of users through uorgsuggest.vm"}