CVE-2024-45591

Summary

XWiki Platform document history including authors of any page exposed to unauthorized actors

Severity

medium

EPSS

3.4% (p87)

Also known as

GHSA-pvmm-55r5-g3mm

Published

2024-09-10

References

• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-pvmm-55r5-g3mm
• https://nvd.nist.gov/vuln/detail/CVE-2024-45591
• https://github.com/xwiki/xwiki-platform/commit/26482ee5d29fc21f31134d1ee13db48716e89e0f

Related advisories

• CVE-2026-33137 — critical · Maven/org.xwiki.platform:xwiki-platform-rest-server
• CVE-2025-52472 — critical · Maven/org.xwiki.platform:xwiki-platform-rest-server
• CVE-2025-32969 — critical · Maven/org.xwiki.platform:xwiki-platform-rest-server
• CVE-2025-66473 — high · Maven/org.xwiki.platform:xwiki-platform-rest-server
• CVE-2025-49584 — high · Maven/org.xwiki.platform:xwiki-platform-rest-server
• CVE-2025-29925 — high · Maven/org.xwiki.platform:xwiki-platform-rest-server
• CVE-2025-46554 — medium · Maven/org.xwiki.platform:xwiki-platform-rest-server

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity