Xwiki · Xwiki Platform · CVE-2022-41936
**Name of the Vulnerable Software and Affected Versions**
XWiki Platform versions prior to 13.10.8
XWiki Platform versions prior to 14.4.3
XWiki Platform versions prior to 14.6
**Description**
The `modifications` rest endpoint does not filter out entries according to the user's rights, exposing information hidden from unauthorized users, such as comments and page names.
**Recommendations**
For versions prior to 13.10.8, upgrade to XWiki 13.10.8 or later.
For versions prior to 14.4.3, upgrade to XWiki 14.4.3 or later.
For versions prior to 14.6, upgrade to XWiki 14.6 or later.