{"action":"Upgrade org.xwiki.platform:xwiki-platform-oldcore to 13.10.4 (13.x) or 14.2-rc-1 (14.x) or later.","affected":[{"fixed":"13.10.4","introduced":"11.3.7"},{"fixed":"14.2-rc-1","introduced":"14.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-oldcore","cve_ids":["CVE-2022-31166"],"ecosystem":"Maven","epss":0.01483,"exploited":false,"fixed_versions":["13.10.4","14.2-rc-1"],"ghsa_id":"GHSA-g4h6-qp44-wqvx","id":"tcs_01M5N8X943BN1ED3WQ5WE3VZZ0","modified_at":"2023-11-08T04:09:28.402727Z","published_at":"2022-09-20T21:19:52Z","references":["https://osv.dev/vulnerability/GHSA-g4h6-qp44-wqvx","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-g4h6-qp44-wqvx","https://nvd.nist.gov/vuln/detail/CVE-2022-31166","https://github.com/xwiki/xwiki-platform/pull/1800","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-15776","https://jira.xwiki.org/browse/XWIKI-18386"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-g4h6-qp44-wqvx","url":"https://osv.dev/vulnerability/GHSA-g4h6-qp44-wqvx"}],"summary":"XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups"}