A vulnerability classified as very critical was found in xwiki-platform up to 14.x. Affected by this vulnerability is the function include. The manipulation leads to incorrect authorization.

This vulnerability is known as CVE-2024-38369. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.