{"action":"Upgrade org.xwiki.platform:xwiki-platform-web to 13.2 or later.","affected":[{"fixed":"13.2","introduced":"13.1"}],"component":"org.xwiki.platform:xwiki-platform-web","cve_ids":["CVE-2021-32731"],"ecosystem":"Maven","epss":0.01199,"exploited":false,"fixed_versions":["13.2"],"ghsa_id":"GHSA-h4m4-pgp4-whgm","id":"tcs_01M5N8ZN1QC8W69Z4282JM9VFR","modified_at":"2026-07-08T06:28:02.173413611Z","published_at":"2021-07-02T19:19:04Z","references":["https://osv.dev/vulnerability/GHSA-h4m4-pgp4-whgm","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h4m4-pgp4-whgm","https://nvd.nist.gov/vuln/detail/CVE-2021-32731","https://github.com/xwiki/xwiki-platform/commit/0cf716250b3645a5974c80d8336dcdf885749dff#diff-14a3132e3986b1f5606dd13d9d8a8bb8634bec9932123c5e49e9604cfd850fc2","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-18400"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h4m4-pgp4-whgm","url":"https://osv.dev/vulnerability/GHSA-h4m4-pgp4-whgm"}],"summary":"The reset password form reveal users email address"}