{"action":"Upgrade org.xwiki.platform:xwiki-platform-administration-ui to 12.10.5 (12.x) or 13.2 (13.x) or later.","affected":[{"fixed":"12.10.5","introduced":"0"},{"fixed":"13.2","introduced":"13.0"}],"component":"org.xwiki.platform:xwiki-platform-administration-ui","cve_ids":["CVE-2021-32730"],"ecosystem":"Maven","epss":0.0061,"exploited":false,"fixed_versions":["12.10.5","13.2"],"ghsa_id":"GHSA-v9j2-q4q5-cxh4","id":"tcs_01M5N9DRP2NS5562HQ15JVN2SV","modified_at":"2026-07-08T06:29:36.691468443Z","published_at":"2021-07-02T19:19:13Z","references":["https://osv.dev/vulnerability/GHSA-v9j2-q4q5-cxh4","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-v9j2-q4q5-cxh4","https://nvd.nist.gov/vuln/detail/CVE-2021-32730","https://github.com/xwiki/xwiki-platform/commit/0a36dbcc5421d450366580217a47cc44d32f7257","https://jira.xwiki.org/browse/XWIKI-18315"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-v9j2-q4q5-cxh4","url":"https://osv.dev/vulnerability/GHSA-v9j2-q4q5-cxh4"}],"summary":"No CSRF protection on the password change form"}