CVE-2024-31982

high-risk
Published 2024-04-10

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a closed wiki as the database search is by default accessible for all users. This impacts the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10RC1. As a workaround, one may manually apply the patch to the page `Main.DatabaseSearch`. Alternatively, unless database search is explicitly used by users, this page can be deleted as this is not the default search interface of XWiki.

Do I need to act?

!
94.3% chance of exploitation in next 30 days
EPSS score — higher than 6% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: 2f1129b6da6811479225ab79caf2571452d72402, 0e37972524b5a68c44734112f38a48e746b0909e, 2251e39df282f2a8b2b3581063eb75a8f30d5f30
10
CVSS 10.0/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Xwiki

References (14)

Patch https://github.com/xwiki/xwiki-platform/commit/3c9e4bb04286de94ad24854026a09fa96...
Patch https://github.com/xwiki/xwiki-platform/commit/459e968be8740c8abc2a168196ce21e5b...
Patch https://github.com/xwiki/xwiki-platform/commit/95bdd6cc6298acdf7f8f21298d40eeb83...
Vendor Advisory https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-2858-8cfx-69m9
Exploit https://jira.xwiki.org/browse/XWIKI-21472
Exploit https://www.vicarius.io/vsociety/posts/xwiki-rce-cve-2024-31982
Patch https://github.com/xwiki/xwiki-platform/commit/3c9e4bb04286de94ad24854026a09fa96...
Patch https://github.com/xwiki/xwiki-platform/commit/459e968be8740c8abc2a168196ce21e5b...
Patch https://github.com/xwiki/xwiki-platform/commit/95bdd6cc6298acdf7f8f21298d40eeb83...
Vendor Advisory https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-2858-8cfx-69m9
Exploit https://jira.xwiki.org/browse/XWIKI-21472
https://www.vicarius.io/vsociety/posts/cve-2024-31982-detect-xwiki-vulnerability
https://www.vicarius.io/vsociety/posts/cve-2024-31982-xwiki-mitigation-vulnerabi...
Exploit https://www.vicarius.io/vsociety/posts/xwiki-rce-cve-2024-31982
58
/ 100
high-risk
Severity 33/34 · Critical
Exploitability 20/34 · Moderate
Exposure 5/34 · Minimal