{"action":"Upgrade org.xwiki.platform:xwiki-platform-notifications-ui to 14.10.21 (14.10.x), 15.5.5 (15.5.x) or 15.10.1 (15.10.x) or later.","affected":[{"fixed":"14.10.21","introduced":"13.2-rc-1"},{"fixed":"15.5.5","introduced":"15.0-rc-1"},{"fixed":"15.10.1","introduced":"15.6-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-notifications-ui","cve_ids":["CVE-2024-46978"],"ecosystem":"Maven","epss":0.00519,"exploited":false,"fixed_versions":["14.10.21","15.5.5","15.10.1"],"ghsa_id":"GHSA-r95w-889q-x2gx","id":"tcs_01M5N9BAB2CQM085A7935R85GG","modified_at":"2024-11-18T16:27:14Z","published_at":"2024-09-18T14:26:16Z","references":["https://osv.dev/vulnerability/GHSA-r95w-889q-x2gx","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r95w-889q-x2gx","https://nvd.nist.gov/vuln/detail/CVE-2024-46978","https://github.com/xwiki/xwiki-platform/commit/4771573dac88e0cf04e30f1a8dfa183c048d503a","https://github.com/xwiki/xwiki-platform/commit/99193a7e9a203b5bb8b2583ac96f5f4d56b9aa1a","https://github.com/xwiki/xwiki-platform/commit/b9180b874a22e383ad5f2cd9e25bfed4594d4955","https://github.com/xwiki/xwiki-platform/commit/e8acc9d8e6af7dfbfe70716ded431642ae4a6dd4","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-20337"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-r95w-889q-x2gx","url":"https://osv.dev/vulnerability/GHSA-r95w-889q-x2gx"}],"summary":"org.xwiki.platform:xwiki-platform-notifications-ui is missing checks for notification filter preferences editions"}