CVE-2023-50719
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-50719 is a vulnerability affecting XWiki Platform's Solr-based search feature. Starting from version 7.2-milestone-2 and before 14.10.15, 15.5.2, and 15.7-rc-1, this vulnerability discloses password hashes of all users with view access to their respective profiles. By default, user profiles are public, making this issue particularly concerning. The vulnerability also exposes passwords like API keys for extensions. XWiki's versions 14.10.15, 15.5.2, and 15.7-rc-1 have addressed this issue, but there are currently no known workarounds for those who have not yet applied the patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Xwiki
Affected Vendors
- xwiki