https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:00:07.028738+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-21648 CVE-2024-21648 — XWiki has no right protection on rollback action 2026-10-05T05:00:07.048106+00:00

Affected: xwiki-platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of the page to gain rights they don't have anymore. The problem has been patched in XWiki 14.10.17, 15.5.3 and 15.8-rc-1 by ensuring that the rights are checked before performing the rollback.