PT-2023-4802 · Unknown · Ckeditor Integration Ui+1

Michael Hamann · Published 2023-01-04 · Updated 2023-01-10 · CVE-2023-22457

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CKEditor Integration UI versions prior to 1.64.3 XWiki Platform versions prior to 14.6 RC1

Description The issue is related to insufficient authentication checks for executed requests in the CKEditor integration interface of the XWiki platform. This allows an attacker to execute a Cross-Site Request Forgery (CSRF) attack, potentially leading to arbitrary remote code execution. If a privileged user with programming rights is tricked into executing a GET request to the CKEditor.HTMLConverter document with certain parameters, the attacker could gain rights, access private information, or impact the availability of the wiki.

Recommendations For CKEditor Integration UI versions prior to 1.64.3, upgrade to version 1.64.3 or later. For XWiki Platform versions prior to 14.6 RC1, upgrade to version 14.6 RC1 or later. As a temporary workaround, consider restricting access to the CKEditor.HTMLConverter document to minimize the risk of exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2023-05265

CVE-2023-22457

GHSA-6MJP-2RM6-9G85

Affected Products

Ckeditor Integration Ui

Xwiki Platform

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22457.json · Exploit
• 🔥 https://github.com/xwiki-contrib/application-ckeditor/security/advisories/GHSA-6mjp-2rm6-9g85 · Exploit
• 🔥 https://jira.xwiki.org/browse/CKEDITOR-475 · Exploit
• https://github.com/xwiki-contrib/application-ckeditor/commit/6b1053164386aefc526df7512bc664918aa6849b · Patch
• https://bdu.fstec.ru/vul/2023-05265 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-22457 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-22457 · Security Note
• https://osv.dev/vulnerability/GHSA-6mjp-2rm6-9g85 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-22457 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-22457 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-22457 · Vendor Advisory
• https://github.com/xwiki-contrib/application-ckeditor · Note
• https://t.me/cibsecurity/55892 · Telegram Post