https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:00:11.576550+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-35151 CVE-2023-35151 — XWiki Platform may show email addresses in clear in REST results 2026-10-08T10:00:11.577662+00:00

Affected: xwiki-platform

XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a REST endpoint and obtain the obfuscated passwords, even when the mail obfuscation is activated. The issue has been patched in XWiki 14.4.8, 14.10.6, and 15.1. There is no known workaround.