GitHub Advisoryadvisory · Maven

GHSA-vxf7-mx22-jr24 org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro

CRITICAL Published 2023-04-12 Modified 2023-04-26 Official page ↗
Aliases
CVE-2023-29205
Ecosystem
Maven
Packages
org.xwiki.platform:xwiki-platform-rendering-xwiki
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-79
Reviewed
2023-04-12

Affected packages

• Maven org.xwiki.platform:xwiki-platform-rendering-xwiki: < 14.8-rc-1 → fixed in 14.8-rc-1

Description

Impact The HTML macro does not systematically perform a proper neutralization of script-related html tags. As a result, any user able to use the html macro in XWiki, is able to introduce an XSS attack. This can be particularly dangerous since in a standard wiki, any user is able to use the html macro directly in their own user profile page. Patches The problem has been patched in XWiki 14.8RC1. The patch involve that the HTML macro are systematically cleaned up whenever the user does not have script right. Workarounds There's no workaround for this issue. For more information If you have any questions or comments about this advisory: • Open an issue in Jira • Email us at security ML

Related

Alias · CVE (1)

  • CVE-2023-29205 XWiki Commons are technical libraries common to several other top level XWiki projects. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References