CVE-2023-34467

Summary

CVE-2023-34467 affects the XWiki Platform, a widely-used wiki solution. Prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfuscation feature had a limitation. Although the displayed mail to the end user was obfuscated, the unobfuscated version was still sent in the server's response. This issue allowed users to filter and sort on the unobfuscated mail content, ultimately revealing the actual email addresses, potentially putting user privacy at risk. This vulnerability has been addressed and patched in the specified versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.