Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
XWiki Weak Password Recovery Mechanism for Forgotten Password Vulnerability - CVE-2022-23619 - Vulnerability Database
XWikiplatform

XWiki Weak Password Recovery Mechanism for Forgotten Password Vulnerability - CVE-2022-23619

High
Reference: CVE-2022-23619
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-23619
Title: XWiki Weak Password Recovery Mechanism for Forgotten Password Vulnerability
Overview:

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it39s possible to guess if a user has an account on the wiki by using the quotForgot your passwordquot form even if the wiki is closed to guest users. This problem has been patched on XWiki 12.10.9 13.4.1 and 13.6RC1. Users are advised yo update. There are no known workarounds for this issue.