by Kastro
Paper/Archive/CVE-2023-29211

CVE-2023-29211

xwiki xwiki-platform — org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability

EPSS 1%public exploitCVSS 10.0
critical.is priorityof 100
54
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 68.0.680 × 2013.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights `WikiManager.DeleteWiki` can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the `wikiId` url parameter. The problem has been patched on XWiki 13.10.11, 14.4.7, and 14.10.

Affected

ProductAffectedFixed inSource
xwiki-platform>= 5.3-milestone-2, < 13.10.11–CNA
xwiki-platform>= 14.0-rc-1, < 14.4.7–CNA
xwiki-platform>= 14.5, < 14.10–CNA

Scores by source

GitHub_M (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refgithub.com/xwiki/xwiki-platform/security/advisories/GHSA-w7v9-fc49-4qg4refgithub.com/xwiki/xwiki-platform/commit/ba4c76265b0b8a5e2218be400d18f08393fe1428#diff-64f39f5f2cc8c6560a44e21a5cfd509ef00e8a2157cd9847c9940a2e08ea43d1R63-R64refjira.xwiki.org/browse/XWIKI-20297