PT-2023-4713 · Unknown · Xwiki Platform

Renniepak · Publicado 2023-06-22 · Atualizado 2025-03-17 · CVE-2023-35158

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions XWiki Platform versions 9.4-rc-1 through 14.10.4 XWiki Platform versions 15.0 through 15.1-rc-0

Description The issue allows users to forge a URL with a payload that injects Javascript into the page, enabling cross-site scripting (XSS). This can be exploited by using a URL such as "/xwiki/bin/view/XWiki/Main?xpage=restore&showBatch=true&xredirect=javascript:alert(document.domain)" to perform a XSS attack. The vulnerability exists due to the lack of measures to neutralize alternative XSS syntax.

Recommendations For XWiki Platform versions 9.4-rc-1 through 14.10.4, update to version 14.10.5 or later. For XWiki Platform versions 15.0 through 15.1-rc-0, update to version 15.1-rc-1 or later. As a temporary workaround, consider editing the template restore.vm to perform checks on it, but note that the appropriate fix involves new APIs that have been recently introduced in XWiki.

Exploit

Correção

Enumeração de Fraquezas

CWE-87

Identificadores relacionados

BDU:2023-05139

CVE-2023-35158

GHSA-MWXJ-G7FW-7HC8

Produtos afetados

Xwiki Platform

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/35xxx/CVE-2023-35158.json · Exploit
• https://github.com/xwiki/xwiki-platform · Nota
• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-mwxj-g7fw-7hc8 · Aviso do Fabricante
• https://github.com/xwiki/xwiki-platform/commit/d5472100606c8355ed44ada273e91df91f682738 · Aviso do Fabricante
• https://jira.xwiki.org/browse/XWIKI-20583 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-05139 · Nota de Segurança
• https://jira.xwiki.org/browse/XWIKI-20352 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-mwxj-g7fw-7hc8 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-35158 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-35158 · Aviso do Fabricante
• https://t.me/csirt_italia/2296 · Publicação no Telegram