PT-2024-24096 · Xwiki · Xwiki Platform

Michael Hamann · Published 2023-10-26 · Updated 2025-01-09 · CVE-2024-31465

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions XWiki Platform versions 5.0-rc-1 through 14.10.19 XWiki Platform versions 15.5.3 and earlier XWiki Platform versions prior to 15.9-rc-1

Description The issue allows any user with edit rights on any page to execute code on the server by adding an object of type XWiki.SearchSuggestSourceClass to their user profile or any other page. This compromises the confidentiality, integrity, and availability of the whole XWiki installation. To exploit this, an attacker can add an object of type XWiki.SearchSuggestSourceClass to their profile page, set properties like name, engine, service, query, limit, and icon to malicious code, and then access the page with a specific URL parameter ?sheet=XWiki.SearchSuggestSourceSheet.

Recommendations For XWiki Platform versions 5.0-rc-1 through 14.10.19, update to version 14.10.20 or later. For XWiki Platform versions 15.5.3 and earlier, update to version 15.5.4 or later. For XWiki Platform versions prior to 15.9-rc-1, update to version 15.9-rc-1 or later. As a temporary workaround, manually apply the patch to the document XWiki.SearchSuggestSourceSheet.

Exploit

Fix

Code Injection

Eval Injection

Weakness Enumeration

CWE-94

CWE-95

Related Identifiers

BDU:2025-01901

CVE-2024-31465

GHSA-34FJ-R5GQ-7395

Affected Products

Xwiki Platform

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31465.json · Exploit
• 🔥 https://jira.xwiki.org/browse/XWIKI-21474 · Exploit
• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-34fj-r5gq-7395 · Vendor Advisory
• https://github.com/xwiki/xwiki-platform/commit/6a7f19f6424036fce3d703413137adde950ae809#diff-67b473d2b6397d65b7726c6a13555850b11b10128321adf9e627e656e1d130a5 · Patch
• https://github.com/xwiki/xwiki-platform/commit/0317a3aa78065e66c86fc725976b06bf7f9b446e · Patch
• https://github.com/xwiki/xwiki-platform/commit/2740974c32dbb7cc565546d0f04e2374b32b36f7 · Patch
• https://github.com/xwiki/xwiki-platform/commit/6a7f19f6424036fce3d703413137adde950ae809 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-31465 · Security Note
• https://bdu.fstec.ru/vul/2025-01901 · Security Note
• https://osv.dev/vulnerability/GHSA-34fj-r5gq-7395 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-31465 · Vendor Advisory
• https://github.com/xwiki/xwiki-platform · Note
• https://twitter.com/CVEnew/status/1778263606406328500 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1778200850864705985 · Twitter Post
• https://t.me/cvenotify/76420 · Telegram Post