CVE-2023-46731

high-risk

Published 2023-11-06

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section URL parameter that is used in the code for displaying administration sections. This allows any user with read access to the document `XWiki.AdminSheet` (by default, everyone including unauthenticated users) to execute code including Groovy code. This impacts the confidentiality, integrity and availability of the whole XWiki instance. This vulnerability has been patched in XWiki 14.10.14, 15.6 RC1 and 15.5.1. Users are advised to upgrade. Users unablr to upgrade may apply the fix in commit `fec8e0e53f9` manually. Alternatively, to protect against attacks from unauthenticated users, view right for guests can be removed from this document (it is only needed for space and wiki admins).

Do I need to act?

57.5% chance of exploitation in next 30 days

EPSS score — higher than 43% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Fix available

Upgrade to: fec8e0e53f9fa2c3f1e568cc15b0e972727c803a

CVSS 10.0/10 Critical

NETWORK / LOW complexity

Affected Products (1)

Xwiki

Affected Vendors

Xwiki

References (8)

Patch https://github.com/xwiki/xwiki-platform/commit/fec8e0e53f9fa2c3f1e568cc15b0e9727...

Exploit https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-62pr-qqf7-hh89

Issue Tracking https://jira.xwiki.org/browse/XWIKI-21110

Patch https://github.com/xwiki/xwiki-platform/commit/fec8e0e53f9fa2c3f1e568cc15b0e9727...

Exploit https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-62pr-qqf7-hh89

Issue Tracking https://jira.xwiki.org/browse/XWIKI-21110

/ 100

high-risk

Severity 33/34 · Critical

Exploitability 18/34 · Moderate

Exposure 5/34 · Minimal