https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T10:05:06.799888+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234459 EUVD-2026-234459 2026-10-27T10:05:06.802774+00:00 EUVD-2026-234459 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23617 fkie_cve-2022-23617 2026-10-27T10:05:06.802806+00:00

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-gf7x-2j2x-7f73 GHSA-gf7x-2j2x-7f73 — Missing authorization in xwiki-platform 2026-10-27T10:05:06.802836+00:00

Affected: Maven: org.xwiki.platform:xwiki-platform-oldcore

### Impact

Any user with edit right can copy the content of a page it does not have access to by using it as template of a new page.

### Patches

It has been patched in XWiki 13.2CR1 and 12.10.6

### Workarounds

There is no workaround beside patching.

### References

https://jira.xwiki.org/browse/XWIKI-18430

### For more information

If you have any questions or comments about this advisory: * Open an issue in [Jira XWiki](https://jira.xwiki.org) * Email us at [our security mailing list](mailto:security@xwiki.org)

 https://cve.radiocsirt.org/vuln/gsd-2022-23617 gsd-2022-23617 2026-10-27T10:05:06.802870+00:00 gsd-2022-23617