{"action":"Upgrade org.xwiki.platform:xwiki-platform-scheduler-ui to 15.10.9 (15.x) or 16.3.0 (16.x) or later.","affected":[{"fixed":"15.10.9","introduced":"1.2-milestone-2"},{"fixed":"16.3.0","introduced":"16.0.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-scheduler-ui","cve_ids":["CVE-2024-55876"],"ecosystem":"Maven","epss":0.00588,"exploited":false,"fixed_versions":["15.10.9","16.3.0"],"ghsa_id":"GHSA-cwq6-mjmx-47p6","id":"tcs_01M5N8TGZAY672PRZ3GYGSPNEC","modified_at":"2024-12-12T22:31:48Z","published_at":"2024-12-12T19:21:16Z","references":["https://osv.dev/vulnerability/GHSA-cwq6-mjmx-47p6","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-cwq6-mjmx-47p6","https://nvd.nist.gov/vuln/detail/CVE-2024-55876","https://github.com/xwiki/xwiki-platform/commit/54bcc5a7a2e440cc591b91eece9c13dc0c487331","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-21663"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-cwq6-mjmx-47p6","url":"https://osv.dev/vulnerability/GHSA-cwq6-mjmx-47p6"}],"summary":"XWiki's scheduler in subwiki allows scheduling operations for any main wiki user"}