Junglewise Threat Intelligence

CVE-2020-13654: Improper escaping in XWiki Platform

CVE-2020-13654 · Severity: low · CVSS 3.1 · Published 2022-02-09

Technologies: org.xwiki.platform:xwiki-platform-web (Maven). Vendors: Maven.

Executive brief

Improper escaping in XWiki Platform

Affected products

Maven org.xwiki.platform:xwiki-platform-web

Related threats

XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
The reset password form reveal users email address