CVE-2023-35151

Published: 2023-06-23T17:15Z

Last Modified: 2024-11-21T08:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a REST endpoint and obtain the obfuscated passwords, even when the mail obfuscation is activated. The issue has been patched in XWiki 14.4.8, 14.10.6, and 15.1. There is no known workaround. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt