GitHub Advisoryadvisory · Maven

GHSA-jgrg-qvpp-9vwr XWiki Platform vulnerable to code injection from account through AWM view sheet

CRITICAL Published 2023-04-20 Modified 2023-04-20 Official page ↗
Aliases
CVE-2023-29527
Ecosystem
Maven
Packages
org.xwiki.platform:xwiki-platform-appwithinminutes-ui
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-74
Reviewed
2023-04-20

Affected packages

• Maven org.xwiki.platform:xwiki-platform-appwithinminutes-ui: >= 7.4.4, < 14.10.3 → fixed in 14.10.3

Description

Impact Steps to reproduce: 1. As a user without script or programming right, edit your user profile (or any other document) with the wiki editor and add the content `{{groovy}}println("Hello " + "from Groovy!"){{/groovy}}` 1. Edit the document with the object editor and add an object of type AppWithinMinutes.LiveTableClass (no values need to be set, just save) 1. View the document Patches The vulnerability has been patched in XWiki 15.0-rc-1 and 14.10.3. Workarounds There is no known workaround. References https://jira.xwiki.org/browse/XWIKI-20423 For more information If you have any questions or comments about this advisory: • Open an issue in Jira XWiki.org • Email us at Security Mailing List

Related

Alias · CVE (1)

  • CVE-2023-29527 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. vulnerability

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References