Vulnerability · Published Apr 15, 2023 · Assigned by GitHub_M
CVE-2023-29204URL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcore
Medium 4.7
In plain English
A medium-severity open redirect in xwiki-platform from xwiki. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 78% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Fixed versions are available - upgrade the affected package.
Official description
XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as `//mydomain.com` (i.e. omitting the `http:`). It was also possible to bypass it when using URL such as `http:/mydomain.com`. The problem has been patched on XWiki 13.10.10, 14.4.4 and 14.8RC1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.xwiki.platform:xwiki-platform-oldcore | 13.10.10 | GHSA-xwph-x6xj-wggv |
| Maven | org.xwiki.platform:xwiki-platform-oldcore | 14.4.4 | GHSA-xwph-x6xj-wggv |
| Maven | org.xwiki.platform:xwiki-platform-oldcore | 14.8-rc-1 | GHSA-xwph-x6xj-wggv |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| xwiki | xwiki-platform | >= 6.0-rc-1, < 13.10.10>= 14.0-rc-1, < 14.4.4>= 14.5, < 14.8-rc-1 |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
References
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xwph-x6xj-wggv x_refsource_CONFIRM
- https://github.com/xwiki/xwiki-platform/commit/e4f7f68e93cb08c25632c126356d218abf192d1e#diff-c445f288d5d63424f56ef13f65514ab4e174a72e979b53b88197c2b7def267cf x_refsource_MISC
- https://jira.xwiki.org/browse/XWIKI-10309 x_refsource_MISC
- https://jira.xwiki.org/browse/XWIKI-19994 x_refsource_MISC