Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
XWiki Transmission of Private Resources into a New Sphere (Resource Leak) Vulnerability - CVE-2023-38509 - Vulnerability Database
XWikiplatform

XWiki Transmission of Private Resources into a New Sphere (Resource Leak) Vulnerability - CVE-2023-38509

Medium
Reference: CVE-2023-38509
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-38509
Title: XWiki Transmission of Private Resources into a New Sphere (Resource Leak) Vulnerability
Overview:

XWiki Platform is a generic wiki platform. In org.xwiki.platform:xwiki-platform-livetable-ui starting with version 3.5-milestone-1 and prior to versions 14.10.9 and 15.3-rc-1 the mail obfuscation configuration was not fully taken into account and is was still possible by obfuscated emails. This has been patched in XWiki 14.10.9 and XWiki 15.3-rc-1. A workaround is to modify the page XWiki.LiveTableResultsMacros following the patch.