Test ID:	1.3.6.1.4.1.25623.1.0.170253
Category:	Web application abuses
Title:	XWiki 12.4 < 13.10.7, 14.x < 14.4.2, 14.5.x < 14.5RC1 Missing Authorization Vulnerability (GHSA-p5v9-g8w8-5q4v)
Summary:	Xwiki is prone to a missing authorization vulnerability.
Description:	Summary: Xwiki is prone to a missing authorization vulnerability. Vulnerability Insight: Any user (logged in or not) with access to the page XWiki.XWikiUserProfileSheet can enable or disable any user profile. This might allow to a disabled user to re-enable themselves, or to an attacker to disable any user of the wiki. Affected Software/OS: XWiki version 12.4 prior to 13.10.7, 14.x prior to 14.4.2 and 14.5.x prior to 14.5RC1. Solution: Update to version 13.10.7, 14.4.2, 14.5RC1 or later. CVSS Score: 8.5 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:C/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-41930 https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p5v9-g8w8-5q4v https://github.com/xwiki/xwiki-platform/commit/5be1cc0adf917bf10899c47723fa451e950271fa https://jira.xwiki.org/browse/XWIKI-19792
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.