A vulnerability classified as very critical was found in xwiki-platform up to 14.x. Affected by this vulnerability is the function
include
. The manipulation leads to incorrect authorization.
This vulnerability is known as CVE-2024-38369. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.