XWiki Platform section eval injection

Summaryinfo

A vulnerability, which was classified as critical, was found in XWiki Platform. Impacted is an unknown function. Such manipulation of the argument section leads to eval injection. This vulnerability is listed as CVE-2023-46731. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in XWiki Platform (Content Management System) (affected version not known). Affected by this issue is some unknown functionality. The manipulation of the argument section with an unknown input leads to a eval injection vulnerability. Using CWE to declare the problem leads to CWE-95. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval"). Impacted is confidentiality, integrity, and availability. CVE summarizes:

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section URL parameter that is used in the code for displaying administration sections. This allows any user with read access to the document `XWiki.AdminSheet` (by default, everyone including unauthenticated users) to execute code including Groovy code. This impacts the confidentiality, integrity and availability of the whole XWiki instance. This vulnerability has been patched in XWiki 14.10.14, 15.6 RC1 and 15.5.1. Users are advised to upgrade. Users unablr to upgrade may apply the fix in commit `fec8e0e53f9` manually. Alternatively, to protect against attacks from unauthenticated users, view right for guests can be removed from this document (it is only needed for space and wiki admins).

The weakness was presented 11/07/2023 as GHSA-62pr-qqf7-hh89. The advisory is shared for download at github.com. This vulnerability is handled as CVE-2023-46731 since 10/25/2023. There are known technical details, but no exploit is available.

Upgrading eliminates this vulnerability. Applying the patch fec8e0e53f9fa2c3f1e568cc15b0e972727c803a is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Content Management System

Vendor

• XWiki

Name

• Platform

License

• open-source

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion