GitHub Advisoryadvisory · Maven

GHSA-phwm-87rg-27qq XWiki Platform vulnerable to reflected cross-site scripting via delattachment action

HIGH Published 2023-06-22 Modified 2023-06-22 Official page ↗
Aliases
CVE-2023-35157
Ecosystem
Maven
Packages
org.xwiki.platform:xwiki-platform-oldcore
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-79, CWE-80
Reviewed
2023-06-22

Affected packages

• Maven org.xwiki.platform:xwiki-platform-oldcore: >= 3.2-milestone-3, < 14.10.6 → fixed in 14.10.6 • Maven org.xwiki.platform:xwiki-platform-oldcore: >= 15.0-rc-0, < 15.1-rc-1 → fixed in 15.1-rc-1

Description

Impact It's possible to perform an XSS by forging a request to a delete attachment action with a specific attachment name. Now this XSS can be exploited only if the attacker knows the CSRF token of the user, or if the user ignores the warning about the missing CSRF token. Patches The vulnerability has been patched in XWiki 15.1-rc-1 and XWiki 14.10.6. Workarounds There's no workaround for this other than upgrading XWiki. References • Jira ticket: https://jira.xwiki.org/browse/XWIKI-20339 • Commit containing the fix: https://github.com/xwiki/xwiki-platform/commit/35e9073ffec567861e0abeea072bd97921a3decf For more information If you have any questions or comments about this advisory: • Open an issue in Jira XWiki.org • Email us at Security Mailing List

Related

Alias · CVE (1)

  • CVE-2023-35157 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. vulnerability

Weakness · CWE (2)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness
  • CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References