XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

CAO 7.5CVE-2026-48048 · GHSA-rh28-mqj4-8x59 · Công bố 10/08/2026 · cập nhật 23/10/2026

Tóm tắt nhanh

CVE-2026-48048 là lỗ hổng mức CAO (CVSS 7.5) ảnh hưởng org.xwiki.platform:xwiki-platform-livetable-ui.
Xác suất bị khai thác trong 30 ngày tới (EPSS): 2.0%, cao hơn 80.8% các lỗ hổng khác.
Cách xử lý: cập nhật lên 17.4.9, 17.10.3, 16.10.17 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
org.xwiki.platform:xwiki-platform-livetable-ui Maven	`≥ 17.0.0-rc-1, < 17.4.9≥ 17.5.0-rc-1, < 17.10.3≥ 6.2.1, < 16.10.17`	`17.4.917.10.316.10.17`

Mô tả

Impact

XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient and with slightly modified parameters to the LiveTableResults, it is still possible to discover password hashes one bit at a time, so with 768 requests, the full password salt and hash can be retrieved of a user.

Patches

The check for password (and email properties) has been adjusted in XWiki 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17.

Workarounds

The patch can be applied manually to the wiki page XWiki.LiveTableResultsMacros.

Resources

Mô tả của NVD

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the `LiveTableResults`, it is still possible to discover password hashes one bit at a time, so with 768 requests, the full password salt and hash can be retrieved of a user. The check for password (and email properties) has been adjusted in XWiki 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17. As a workaround, the patch can be applied manually to the wiki page `XWiki.LiveTableResultsMacros`.