Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
XWiki Improper Handling of Insufficient Privileges Vulnerability - CVE-2024-21648 - Vulnerability Database
XWikiplatform

XWiki Improper Handling of Insufficient Privileges Vulnerability - CVE-2024-21648

High
Reference: CVE-2024-21648
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-21648
Title: XWiki Improper Handling of Insufficient Privileges Vulnerability
Overview:

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection a user can rollback to a previous version of the page to gain rights they don39t have anymore. The problem has been patched in XWiki 14.10.17 15.5.3 and 15.8-rc-1 by ensuring that the rights are checked before performing the rollback.