XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.xwiki.platform:xwiki-platform-oldcore(Maven) | 0 | 12.10.6 | N/A |
| org.xwiki.platform:xwiki-platform-oldcore(Maven) | 13.0 | 13.2-rc-1 | N/A |
CVSS Metrics
