https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:16:56.293006+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00971 bdu:2024-00971 2026-10-05T01:16:56.388408+00:00 bdu:2024-00971 https://cve.radiocsirt.org/vuln/euvd-2026-8977 EUVD-2026-8977 2026-10-05T01:16:56.388453+00:00 EUVD-2026-8977 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38509 fkie_cve-2023-38509 2026-10-05T01:16:56.388499+00:00

XWiki Platform is a generic wiki platform. In org.xwiki.platform:xwiki-platform-livetable-ui starting with version 3.5-milestone-1 and prior to versions 14.10.9 and 15.3-rc-1, the mail obfuscation configuration was not fully taken into account and is was still possible by obfuscated emails. This has been patched in XWiki 14.10.9 and XWiki 15.3-rc-1. A workaround is to modify the page `XWiki.LiveTableResultsMacros` following the patch.

 https://cve.radiocsirt.org/vuln/ghsa-g9w4-prf3-m25g GHSA-g9w4-prf3-m25g — Obfuscated email addresses should not be sorted 2026-10-05T01:16:56.388547+00:00

Affected: Maven: org.xwiki.platform:xwiki-platform-livetable-ui

## Impact

The mail obfuscation configuration was not fully taken into account and is was still possible by obfuscated emails.

See https://jira.xwiki.org/browse/XWIKI-20601 for the reproduction steps.

## Patches

This has been patched in XWiki 14.10.9, and XWiki 15.3-rc-1.

## Workarounds

The workaround is to modify the page XWiki.LiveTableResultsMacros following this [patch](https://github.com/xwiki/xwiki-platform/commit/1dfb6804d4d412794cbe0098d4972b8ac263df0c).

## References

- https://jira.xwiki.org/browse/XWIKI-20601 - https://github.com/xwiki/xwiki-platform/commit/1dfb6804d4d412794cbe0098d4972b8ac263df0c

## For more information

If you have any questions or comments about this advisory:

- Open an issue in [Jira XWiki.org](https://jira.xwiki.org/) - Email us at [Security Mailing List](mailto:security@xwiki.org)

 https://cve.radiocsirt.org/vuln/gsd-2023-38509 gsd-2023-38509 2026-10-05T01:16:56.388586+00:00 gsd-2023-38509