CVE-2022-24898
published 2022-04-28CVE-2022-24898: org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4…
PriorityP428medium4.9CVSS 3.1
AVNACLPRHUINSUCHINAN
EPSS
1.41%
69.3th percentile
org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4, and 13.8-rc-1, it is possible for a script to access any file accessing to the user running XWiki application server with XML External Entity Injection through the XML script service. The problem has been patched in versions 12.10.10, 13.4.4, and 13.8-rc-1. There is no easy workaround for fixing this vulnerability other than upgrading and being careful when giving Script rights.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| msrc | windows_server_2022 | — | — |
| xwiki | commons | >= 13.0 < 13.4.4 | 13.4.4 |
| xwiki | commons | >= 13.5 < 13.8 | 13.8 |
| xwiki | commons | >= 2.7 < 12.10.10 | 12.10.10 |
| xwiki | xwiki-commons | — | — |
| xwiki | xwiki-commons | — | — |
| xwiki | xwiki-commons | — | — |
CVSS provenance
nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
ghsa·2022-04-28
CVE-2022-24898 [MEDIUM] CWE-611 Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
### Impact
It's possible in a script to access any file accessing to the user running XWiki application server with XML External Entity Injection through the XML script service.
For example:
```
{{velocity}}
#set($xml=$services.get('xml'))
#set($xxe_payload = "]>&xxe;")
#set($doc=$xml.parse($xxe_payload))
$xml.serialize($doc)
{{/velocity}}
```
### Patches
The problem has been patched on versions 12.10.10, 13.4.4 and 13.8RC1.
### Workarounds
There's no easy workaround for fixing this vulnerability other than upgrading and being careful when giving Script rights.
### References
https://jira.xwiki.org/browse/XWIKI-18946
### For more information
If you have any questions or comments about this advisory
OSV
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
osv·2022-04-28
CVE-2022-24898 [MEDIUM] Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
### Impact
It's possible in a script to access any file accessing to the user running XWiki application server with XML External Entity Injection through the XML script service.
For example:
```
{{velocity}}
#set($xml=$services.get('xml'))
#set($xxe_payload = "]>&xxe;")
#set($doc=$xml.parse($xxe_payload))
$xml.serialize($doc)
{{/velocity}}
```
### Patches
The problem has been patched on versions 12.10.10, 13.4.4 and 13.8RC1.
### Workarounds
There's no easy workaround for fixing this vulnerability other than upgrading and being careful when giving Script rights.
### References
https://jira.xwiki.org/browse/XWIKI-18946
### For more information
If you have any questions or comments about this advisory
Microsoft
Windows SMB Denial of Service Vulnerability
vendor_msrc·2023-05-09·CVSS 7.5
CVE-2023-24898 [HIGH] Windows SMB Denial of Service Vulnerability
Windows SMB Denial of Service Vulnerability
FAQ: What version of Windows Server 2022 is affected by this vulnerability?
This vulnerability only affects the hotpatch version of Windows Server 2022. If you are not running this version of the operating system, no action is required for this vulnerability.
FAQ: What is SMB over QUIC?
SMB over QUIC introduces an alternative to the TCP network transport, providing secure, reliable connectivity to edge file servers over untrusted networks like the Internet. QUIC is an IETF-standardized protocol with many benefits when compared to TCP. For more information, please visit: SMB over QUIC.
Windows SMB: Windows SMB
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Denial of Service
Exploit Status: Publicly Disclosed:No;Exploited:No;Late
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/xwiki/xwiki-commons/commit/947e8921ebd95462d5a7928f397dd1b64f77c7d5https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-m2r5-4w96-qxg5https://jira.xwiki.org/browse/XWIKI-18946https://github.com/xwiki/xwiki-commons/commit/947e8921ebd95462d5a7928f397dd1b64f77c7d5https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-m2r5-4w96-qxg5https://jira.xwiki.org/browse/XWIKI-18946
2022-04-28
Published