PT-2023-22296 · Xwiki · Xwiki Platform

Michael Hamann · Published 2023-04-18 · Updated 2023-04-28 · CVE-2023-29514

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 13.10.11 XWiki Platform versions prior to 14.4.8 XWiki Platform versions prior to 14.10.1 XWiki Platform versions prior to 15.0 RC1

Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document can execute code with programming rights, leading to remote code execution. The issue arises when a user sets the title of a document to a specific groovy script and then appends a particular sheet to the URL of another document.

Recommendations For versions prior to 13.10.11, upgrade to version 13.10.11 or later. For versions prior to 14.4.8, upgrade to version 14.4.8 or later. For versions prior to 14.10.1, upgrade to version 14.10.1 or later. For versions prior to 15.0 RC1, upgrade to version 15.0 RC1 or later. As a temporary workaround, consider patching the code in the affected XWiki document as shown in the available patch.

Exploit

Fix

RCE

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2023-29514

GHSA-9J36-3CP4-RH4J

Affected Products

Xwiki Platform

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29514.json · Exploit
• 🔥 https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9j36-3cp4-rh4j · Exploit
• 🔥 https://jira.xwiki.org/browse/XWIKI-20268 · Exploit
• https://github.com/xwiki/xwiki-platform/commit/7bf7094f8ffac095f5d66809af7554c9cc44de09 · Patch
• https://osv.dev/vulnerability/CVE-2023-29514 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9j36-3cp4-rh4j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29514 · Security Note
• https://github.com/xwiki/xwiki-platform · Note
• https://t.me/cibsecurity/62446 · Telegram Post
• https://t.me/cvenotify/48565 · Telegram Post
• https://t.me/cvenotify/49355 · Telegram Post