Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2021-32731 - Vulnerability Database
XWikiplatform

XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2021-32731

Medium
Reference: CVE-2021-32731
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-32731
Title: XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Between (and including) versions 13.1RC1 and 13.1 the reset password form reveals the email address of users just by giving their username. The problem has been patched on XWiki 13.2RC1. As a workaround it is possible to manually modify the resetpasswordinline.vm to perform the changes made to mitigate the vulnerability.