{"action":"Upgrade org.xwiki.platform:xwiki-platform-livetable-ui to 16.10.17 (16.10.x), 17.4.9 (17.4.x) or 17.10.3 (17.10.x) or later.","affected":[{"fixed":"16.10.17","introduced":"6.2.1"},{"fixed":"17.4.9","introduced":"17.0.0-rc-1"},{"fixed":"17.10.3","introduced":"17.5.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-livetable-ui","cve_ids":["CVE-2026-48048"],"ecosystem":"Maven","epss":0.00651,"exploited":false,"fixed_versions":["16.10.17","17.4.9","17.10.3"],"ghsa_id":"GHSA-rh28-mqj4-8x59","id":"tcs_01M5N9BW6MK8DFSV81P0EE5R7D","modified_at":"2026-05-26T20:41:25.506666Z","published_at":"2026-05-26T20:16:59Z","references":["https://osv.dev/vulnerability/GHSA-rh28-mqj4-8x59","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rh28-mqj4-8x59","https://github.com/xwiki/xwiki-platform/commit/c4442716b02ffcdaa9d5e703b1db6203e36456fa","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-23875"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rh28-mqj4-8x59","url":"https://osv.dev/vulnerability/GHSA-rh28-mqj4-8x59"}],"summary":"XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests"}