This issue has been created
There are 4 updates.
 
 
XWiki Platform / cid:jira-generated-image-avatar-969931d8-f1bf-4dd2-86f2-13a1d7db374b XWIKI-24286 Open

The security scanner can fail in case of malformed review with empty reviews
 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-edf645ac-e7d8-4b9e-8afd-ff04a5de03af Manuel Leduc created this issue on 27/Apr/26 11:33
 
Summary: The security scanner can fail in case of malformed review with empty reviews
Issue Type: cid:jira-generated-image-avatar-969931d8-f1bf-4dd2-86f2-13a1d7db374b Bug
Affects Versions: 15.6-rc-1
Assignee: Unassigned
Components: Extension - Security
Created: 27/Apr/26 11:33
Priority: cid:jira-generated-image-static-major-ff2b8e48-6639-4f45-b06d-25531e1cf704 Major
Reporter: Manuel Leduc
Description:

Reproduction steps

  1. change the review json to have a key in reviewsMap with a null value
  2. start a scan

Expected

The malformed value is ignored and the scan completes

Actual

The malformed value leads to an exception and the full scan fails
 
 

4 updates

 
cid:jira-generated-image-avatar-edf645ac-e7d8-4b9e-8afd-ff04a5de03af Changes by Manuel Leduc on 27/Apr/26 11:33
 
Fix Version: 18.4.0-rc-1
Fix Version: 18.3.0
Fix Version: 17.10.8
Assignee: Manuel Leduc
 
 
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6) Atlassian logo
If image attachments aren't displayed, see this article.