Kurz gesagt
- CVE-2022-23617 ist eine Schwachstelle (MITTEL (CVSS 6.5)) in org.xwiki.platform:xwiki-platform-oldcore, xwiki (xwiki).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.95%, höher als bei 61.1% aller Schwachstellen.
- Abhilfe: auf 13.2-rc-1, 12.10.6 oder neuer aktualisieren.
Description
Impact
Any user with edit right can copy the content of a page it does not have access to by using it as template of a new page.
Patches
It has been patched in XWiki 13.2CR1 and 12.10.6
Workarounds
There is no workaround beside patching.
References
https://jira.xwiki.org/browse/XWIKI-18430
For more information
If you have any questions or comments about this advisory:
NVD description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.
Weitere Schwachstellen in org.xwiki.platform:xwiki-platform-oldcore
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free