by Kastro
Paper/Archive/CVE-2024-42489

CVE-2024-42489

xwikisas xwiki-pro-macros — Pro Macros Remote Code Execution via Viewpdf and similar macros

EPSS 1%public exploitCVSS 10.0
critical.is priorityof 100
53
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 64.6.646 × 2012.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` page or edit or comment right on any page to perform remote code execution. Other macros like Viewppt are vulnerable to the same kind of attack. This vulnerability is fixed in 1.10.1.

Affected

ProductAffectedFixed inSource
xwiki-pro-macros>= 1.0, < 1.10.1–CNA
xwiki-pro-macros1.0 – < 1.10.11.10.1CISA-ADP

Scores by source

GitHub_M (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-cfq3-q227-7j65refgithub.com/xwikisas/xwiki-pro-macros/commit/199553c84901999481a20614f093af2d57970ebarefgithub.com/xwikisas/xwiki-pro-macros/blob/main/xwiki-pro-macros-ui/src/main/resources/Confluence/Macros/Viewpdf.xml#L265-L267