{"action":"Upgrade org.xwiki.platform:xwiki-platform-security-authentication-script to 12.6.8 (12.6.x) or 12.10.4 (12.10.x) or later.","affected":[{"fixed":"12.6.8","introduced":"11.6"},{"fixed":"12.10.4","introduced":"12.7"}],"component":"org.xwiki.platform:xwiki-platform-security-authentication-script","cve_ids":["CVE-2021-32729"],"ecosystem":"Maven","epss":0.00499,"exploited":false,"fixed_versions":["12.6.8","12.10.4"],"ghsa_id":"GHSA-m738-3rc4-5xv3","id":"tcs_01M5N94MBWAT79E1CZ6Y9YWBZC","modified_at":"2026-07-08T06:28:56.222497754Z","published_at":"2021-07-02T19:19:31Z","references":["https://osv.dev/vulnerability/GHSA-m738-3rc4-5xv3","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m738-3rc4-5xv3","https://nvd.nist.gov/vuln/detail/CVE-2021-32729","https://jira.xwiki.org/browse/XWIKI-18276"],"severity":{"label":"low","score":2},"sources":[{"source":"osv","source_id":"GHSA-m738-3rc4-5xv3","url":"https://osv.dev/vulnerability/GHSA-m738-3rc4-5xv3"}],"summary":"A user without PR can reset user authentication failures information"}