CVE-2023-37465

mediumCVSS 6.5covered by 1 sourcefirst seen 2026-07-27

Impact It's possible to forge a request to delete a message. Patches The problem has been patched in version 2.0-rc-1 of Discussion Extension. Workarounds There's no easy workaround except upgrading. References https://jira.xwiki.org/browse/DISCUSSION-22 For more information If you have any questions or comments about this advisory: - Open an issue in Jira XWiki - Email us at security mailing-list

⚡ Watch CVE-2023-37465

Get an email if CVE-2023-37465 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

mediumGHSA-4j38-rw27-97gx: org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that mak…ghsa · 2026-07-27

External references

NVD record for CVE-2023-37465

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2023-37465 status](https://www.csirts.com/badge/CVE-2023-37465)](https://www.csirts.com/cve/CVE-2023-37465)