There are 2 updates, 1 comment.
 
 
XWiki Platform / cid:jira-generated-image-avatar-faf72862-7c39-4560-9070-fc9ff8fa0b21 XWIKI-24089 Open

Error message and/or navigation menu reveal which pages exist for users without view right
 
View issue   ยท   Add comment
 

2 updates

 
cid:jira-generated-image-avatar-86d3f491-b7d7-480c-85b9-7aeb65842da4 Changes by Michael Hamann on 15/Apr/26 15:12
 
CVSS Score: 6.9
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
 
 

1 comment

 
cid:jira-generated-image-avatar-86d3f491-b7d7-480c-85b9-7aeb65842da4 Michael Hamann on 15/Apr/26 15:12
 

We currently don't consider references to be private but we're discussing changing this and considering them as low confidentiality impact. Based on this, I've assigned a CVSS score:

  • no user interaction or privileges required
  • low confidentiality impact
 
 
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6) Atlassian logo
If image attachments aren't displayed, see this article.