Junglewise Threat Intelligence

CVE-2021-32731: The reset password form reveal users email address

CVE-2021-32731 · Severity: low · CVSS 3.1 · Published 2021-07-02

Technologies: org.xwiki.platform:xwiki-platform-web (Maven). Vendors: Maven.

Executive brief

The reset password form reveal users email address

Affected products

Maven org.xwiki.platform:xwiki-platform-web

Related threats

XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
Improper escaping in XWiki Platform