En resumen
- CVE-2022-23617 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a org.xwiki.platform:xwiki-platform-oldcore, xwiki (xwiki).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.95%, mayor que el 61.1% de las vulnerabilidades.
- Solución: actualizar a 13.2-rc-1, 12.10.6 o posterior.
Description
Impact
Any user with edit right can copy the content of a page it does not have access to by using it as template of a new page.
Patches
It has been patched in XWiki 13.2CR1 and 12.10.6
Workarounds
There is no workaround beside patching.
References
https://jira.xwiki.org/browse/XWIKI-18430
For more information
If you have any questions or comments about this advisory:
NVD description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.
Más vulnerabilidades de org.xwiki.platform:xwiki-platform-oldcore
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free