{"action":"Upgrade org.xwiki.platform:xwiki-platform-invitation-ui to 13.10.11 (13.10.x), 14.4.8 (14.4.x) or 14.10.1 (14.10.x) or later.","affected":[{"fixed":"13.10.11","introduced":"2.5-m-1"},{"fixed":"14.4.8","introduced":"14.0-rc-1"},{"fixed":"14.10.1","introduced":"14.5"}],"component":"org.xwiki.platform:xwiki-platform-invitation-ui","cve_ids":["CVE-2023-29518"],"ecosystem":"Maven","epss":0.01144,"exploited":false,"fixed_versions":["13.10.11","14.4.8","14.10.1"],"ghsa_id":"GHSA-px54-3w5j-qjg9","id":"tcs_01M5N988ZMN8KFVESR9BK6FE77","modified_at":"2026-09-10T03:50:01.173825629Z","published_at":"2023-04-20T22:04:00Z","references":["https://osv.dev/vulnerability/GHSA-px54-3w5j-qjg9","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-px54-3w5j-qjg9","https://nvd.nist.gov/vuln/detail/CVE-2023-29518","https://github.com/xwiki/xwiki-platform/commit/3d055a0a5ec42fdebce4d71ee98f94553fdbfebf","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-20283"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-px54-3w5j-qjg9","url":"https://osv.dev/vulnerability/GHSA-px54-3w5j-qjg9"}],"summary":"XWiki Platform vulnerable to privilege escalation from view right using Invitation.InvitationCommon"}