PT-2022-23183 · Unknown · Xwiki Platform

Michael Hamann · Published 2022-09-08 · Updated 2022-09-16 · CVE-2022-36093

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 13.10.5 XWiki Platform versions prior to 14.2

Description The issue allows user accounts to be created even when user registration is disabled by passing a template of the distribution wizard to the xpart template, circumventing email verification. This can be exploited on a private wiki, potentially giving the attacker access to the wiki, and may also give attackers write access to an otherwise read-only public wiki. The issue can be exploited when an external authentication system like LDAP is configured, but authentication fails unless the authentication system supports a bypass or local accounts are enabled.

Recommendations For XWiki Platform versions prior to 13.10.5, update to version 13.10.5 or later. For XWiki Platform versions prior to 14.2, update to version 14.2 or later. As a temporary workaround, consider replacing xpart.vm with a patched version from the patch without updating XWiki.

Exploit

Fix

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Weakness Enumeration

CWE-288

CWE-287

Related Identifiers

CVE-2022-36093

GHSA-H5J3-5X63-P8JV

Affected Products

Xwiki Platform

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/36xxx/CVE-2022-36093.json · Exploit
• https://github.com/xwiki/xwiki-platform/commit/70c64c23f4404f33289458df2a08f7c4be022755 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-36093 · Security Note
• https://jira.xwiki.org/browse/XWIKI-19558 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-36093 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-h5j3-5x63-p8jv · Vendor Advisory
• https://github.com/xwiki/xwiki-platform · Note
• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h5j3-5x63-p8jv · Note
• https://t.me/cvenotify/35891 · Telegram Post