In breve
- CVE-2022-23617 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda org.xwiki.platform:xwiki-platform-oldcore, xwiki (xwiki).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.95%, superiore al 61.1% delle vulnerabilità.
- Correzione: aggiornare a 13.2-rc-1, 12.10.6 o successiva.
Description
Impact
Any user with edit right can copy the content of a page it does not have access to by using it as template of a new page.
Patches
It has been patched in XWiki 13.2CR1 and 12.10.6
Workarounds
There is no workaround beside patching.
References
https://jira.xwiki.org/browse/XWIKI-18430
For more information
If you have any questions or comments about this advisory:
NVD description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.
Altre vulnerabilità di org.xwiki.platform:xwiki-platform-oldcore
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free