Threats tagged 'ghsa-8c52-x9w7-vc95'

A vulnerability in XWiki Pro Macros (versions prior to 1.27.0) allows users without view rights on a restricted page to view the content of office file attachments via the view file macro on a public page. This can lead to unauthorized disclosure of private data if the user knows the attachment reference and has edit rights on a page. The issue is fixed in version 1.27.0.