{"action":"Upgrade org.xwiki.platform:xwiki-platform-security-authentication-default to 13.10.8 (13.x) or 14.4.3 (14.x) or later.","affected":[{"fixed":"13.10.8","introduced":"13.1RC1"},{"fixed":"14.4.3","introduced":"14.0.0"}],"component":"org.xwiki.platform:xwiki-platform-security-authentication-default","cve_ids":["CVE-2022-41933"],"ecosystem":"Maven","epss":0.00517,"exploited":false,"fixed_versions":["13.10.8","14.4.3"],"ghsa_id":"GHSA-q2hm-2h45-v5g3","id":"tcs_01M5N98E2ZYTMV9N6QSRJF2WB9","modified_at":"2026-02-04T04:09:12.196077Z","published_at":"2022-11-21T22:37:11Z","references":["https://osv.dev/vulnerability/GHSA-q2hm-2h45-v5g3","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-599v-w48h-rjrm","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-q2hm-2h45-v5g3","https://nvd.nist.gov/vuln/detail/CVE-2022-41933","https://github.com/xwiki/xwiki-platform/commit/443e8398b75a1295067d74afb5898370782d863a#diff-f8a8f8ba80dfc55f044e2e60b521ce379176430ca6921b0f87b79cf682531f79L322","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19869","https://jira.xwiki.org/browse/XWIKI-19945"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-q2hm-2h45-v5g3","url":"https://osv.dev/vulnerability/GHSA-q2hm-2h45-v5g3"}],"summary":"Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-default"}