Vulnerability in Xwiki

CVE-2005-4862

The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.

EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.

Affected products

  • Xwiki — versions 0.9.793
  • N/a — versions n/a

Weakness classification (CWE)

References