{"action":"Upgrade org.xwiki.platform:xwiki-platform-rest-server to 15.10.9 (15.x) or 16.3.0-rc-1 (16.x) or later.","affected":[{"fixed":"15.10.9","introduced":"1.8.0"},{"fixed":"16.3.0-rc-1","introduced":"16.0.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-rest-server","cve_ids":["CVE-2024-45591"],"ecosystem":"Maven","epss":0.03417,"exploited":false,"fixed_versions":["15.10.9","16.3.0-rc-1"],"ghsa_id":"GHSA-pvmm-55r5-g3mm","id":"tcs_01M5N983FEQC6E8KK7WACPXTHK","modified_at":"2024-09-10T19:01:52Z","published_at":"2024-09-10T15:53:27Z","references":["https://osv.dev/vulnerability/GHSA-pvmm-55r5-g3mm","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-pvmm-55r5-g3mm","https://nvd.nist.gov/vuln/detail/CVE-2024-45591","https://github.com/xwiki/xwiki-platform/commit/26482ee5d29fc21f31134d1ee13db48716e89e0f","https://github.com/xwiki/xwiki-platform/commit/9cbca9808300797c67779bb9a665d85cf9e3d4b8","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-22052"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-pvmm-55r5-g3mm","url":"https://osv.dev/vulnerability/GHSA-pvmm-55r5-g3mm"}],"summary":"XWiki Platform document history including authors of any page exposed to unauthorized actors"}