Em resumo
- CVE-2022-23617 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta org.xwiki.platform:xwiki-platform-oldcore, xwiki (xwiki).
- Chance de exploração nos próximos 30 dias (EPSS): 0.95%, maior que 61.1% das vulnerabilidades.
- Correção: atualize para 13.2-rc-1, 12.10.6 ou posterior.
Description
Impact
Any user with edit right can copy the content of a page it does not have access to by using it as template of a new page.
Patches
It has been patched in XWiki 13.2CR1 and 12.10.6
Workarounds
There is no workaround beside patching.
References
https://jira.xwiki.org/browse/XWIKI-18430
For more information
If you have any questions or comments about this advisory:
NVD description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.
Mais vulnerabilidades de org.xwiki.platform:xwiki-platform-oldcore
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free