PT-2022-24946 · Xwiki · Xwiki Oidc

Clément Aubin · Published 2022-11-04 · Updated 2022-11-07 · CVE-2022-39387

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions XWiki OIDC versions prior to 1.29.1

Description The issue allows an attacker to bypass XWiki authentication by specifying their own OpenID provider through request parameters, such as oidc.endpoint.*, or by using an XWiki-based OpenID provider with oidc.xwikiprovider. Additionally, an attacker can provide a specific group mapping through oidc.groups.mapping to automatically become part of the XWikiAdminGroup.

Recommendations For versions prior to 1.29.1, upgrade to version 1.29.1 to resolve the issue. There is no workaround, and an upgrade of the authenticator is required.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2022-39387

GHSA-M7GV-V8XX-V47W

Affected Products

Xwiki Oidc

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39387.json · Exploit
• https://github.com/xwiki-contrib/oidc/commit/0247af1417925b9734ab106ad7cd934ee870ac89 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-39387 · Security Note
• https://jira.xwiki.org/browse/OIDC-118 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m7gv-v8xx-v47w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39387 · Vendor Advisory
• https://github.com/xwiki-contrib/oidc · Note
• https://github.com/xwiki-contrib/oidc/security/advisories/GHSA-m7gv-v8xx-v47w · Note