PT-2023-25177 · Unknown · Xwiki Platform

Michael Hamann · Published 2023-06-20 · Updated 2023-06-28 · CVE-2023-35166

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 14.10.5 XWiki Platform versions prior to 15.1-rc-1

Description The issue allows execution of any wiki content with the rights of the TipsPanel author by creating a tip UI extension. This can be achieved by adding an object of type UIExtensionClass and setting specific parameters, including the tip parameter with a groovy macro. The groovy macro is executed when the "Help.TipsPanel" document is opened and refreshed.

Recommendations For XWiki Platform versions prior to 14.10.5, update to version 14.10.5 or later. For XWiki Platform versions prior to 15.1-rc-1, update to version 15.1-rc-1 or later. As a temporary workaround, consider restricting access to the UIExtensionClass object and the "Help.TipsPanel" document to minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2023-35166

GHSA-H7CW-44VP-JQ7H

Affected Products

Xwiki Platform

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/35xxx/CVE-2023-35166.json · Exploit
• 🔥 https://jira.xwiki.org/browse/XWIKI-20281 · Exploit
• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h7cw-44vp-jq7h · Vendor Advisory
• https://github.com/xwiki/xwiki-platform/commit/98208c5bb1e8cdf3ff1ac35d8b3d1cb3c28b3263#diff-4e3467d2ef3871a68b2f910e67cf84531751b32e0126321be83c0f1ed5d90b29L176-R178 · Patch
• https://osv.dev/vulnerability/GHSA-h7cw-44vp-jq7h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35166 · Security Note
• https://osv.dev/vulnerability/CVE-2023-35166 · Vendor Advisory
• https://github.com/xwiki/xwiki-platform · Note
• https://t.me/cibsecurity/65375 · Telegram Post