PT-2023-22296 · Xwiki · Xwiki Platform

Michael Hamann · Publicado 2023-04-18 · Atualizado 2023-04-28 · CVE-2023-29514

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 13.10.11 XWiki Platform versions prior to 14.4.8 XWiki Platform versions prior to 14.10.1 XWiki Platform versions prior to 15.0 RC1

Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document can execute code with programming rights, leading to remote code execution. The issue arises when a user sets the title of a document to a specific groovy script and then appends a particular sheet to the URL of another document.

Recommendations For versions prior to 13.10.11, upgrade to version 13.10.11 or later. For versions prior to 14.4.8, upgrade to version 14.4.8 or later. For versions prior to 14.10.1, upgrade to version 14.10.1 or later. For versions prior to 15.0 RC1, upgrade to version 15.0 RC1 or later. As a temporary workaround, consider patching the code in the affected XWiki document as shown in the available patch.

Exploit

Correção

RCE

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2023-29514

GHSA-9J36-3CP4-RH4J

Produtos afetados

Xwiki Platform

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29514.json · Exploit
• 🔥 https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9j36-3cp4-rh4j · Exploit
• 🔥 https://jira.xwiki.org/browse/XWIKI-20268 · Exploit
• https://github.com/xwiki/xwiki-platform · Nota
• https://github.com/xwiki/xwiki-platform/commit/7bf7094f8ffac095f5d66809af7554c9cc44de09 · Correção
• https://osv.dev/vulnerability/CVE-2023-29514 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-9j36-3cp4-rh4j · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-29514 · Nota de Segurança
• https://t.me/cibsecurity/62446 · Publicação no Telegram
• https://t.me/cvenotify/48565 · Publicação no Telegram
• https://t.me/cvenotify/49355 · Publicação no Telegram