Vulnerability · Published Mar 2, 2023 · Assigned by GitHub_M
CVE-2023-26475XWiki Platform vulnerable to Remote Code Execution in Annotations
Critical 10.0
In plain English
A critical-severity privilege mismanagement in xwiki-platform from xwiki. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 63.6% (higher than 99.2% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execute the content in a restricted context. This allows executing anything with the right of the author of any document by annotating the document. This has been patched in XWiki 13.10.11, 14.4.7 and 14.10. There is no easy workaround except to upgrade.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.xwiki.platform:xwiki-platform-annotation-ui | 13.10.11 | GHSA-h6f5-8jj5-cxhr |
| Maven | org.xwiki.platform:xwiki-platform-annotation-ui | 14.4.7 | GHSA-h6f5-8jj5-cxhr |
| Maven | org.xwiki.platform:xwiki-platform-annotation-ui | 14.10 | GHSA-h6f5-8jj5-cxhr |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| xwiki | xwiki-platform | >= 2.3-milestone-1, < 13.10.11>= 14.0-rc-1, < 14.4.7>= 14.5, < 14.10 |
Weakness: CWE-270, CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h6f5-8jj5-cxhr x_refsource_CONFIRM
- https://github.com/xwiki/xwiki-platform/commit/d87d7bfd8db18c20d3264f98c6deefeae93b99f7 x_refsource_MISC
- https://jira.xwiki.org/browse/XWIKI-20360 x_refsource_MISC
- https://jira.xwiki.org/browse/XWIKI-20384 x_refsource_MISC