{"action":"Upgrade org.xwiki.platform:xwiki-platform-rest-server to 13.10.8 (13.10.x), 14.4.3 (14.4.x) or 14.6 (14.6.x) or later.","affected":[{"fixed":"13.10.8","introduced":"8.1"},{"fixed":"14.4.3","introduced":"14.0.0"},{"fixed":"14.6","introduced":"14.5.0"}],"component":"org.xwiki.platform:xwiki-platform-rest-server","cve_ids":["CVE-2022-41936"],"ecosystem":"Maven","epss":0.00811,"exploited":false,"fixed_versions":["13.10.8","14.4.3","14.6"],"ghsa_id":"GHSA-p88w-fhxw-xvcc","id":"tcs_01M5N97016SGK7DDG9M0TQZ697","modified_at":"2023-11-08T04:10:36.487267Z","published_at":"2022-11-21T23:25:00Z","references":["https://osv.dev/vulnerability/GHSA-p88w-fhxw-xvcc","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p88w-fhxw-xvcc","https://nvd.nist.gov/vuln/detail/CVE-2022-41936","https://github.com/xwiki/xwiki-platform/commit/38dc1aa1a4435f24d58f5b8e4566cbcb0971f8ff","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19997"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-p88w-fhxw-xvcc","url":"https://osv.dev/vulnerability/GHSA-p88w-fhxw-xvcc"}],"summary":"Exposure of Private Personal Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-rest-server"}