CVE-2023-35162
published 2023-06-23CVE-2023-35162: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing…
PriorityP340medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
2.40%
81.9th percentile
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the previewactions template to perform a XSS, e.g. by using URL such as: > /xwiki/bin/get/FlamingoThemes/Cerulean xpage=xpart&vm=previewactions.vm&xcontinue=javascript:alert(document.domain). This vulnerability exists since XWiki 6.1-rc-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| xwiki | xwiki | — | — |
| xwiki | xwiki | >= 6.2 < 14.10.5 | 14.10.5 |
| xwiki | xwiki-platform | — | — |
| xwiki | xwiki-platform | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
osv·2023-06-20
CVE-2023-35162 [CRITICAL] XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
### Impact
Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS).
It's possible to exploit the previewactions template to perform a XSS, e.g. by using URL such as:
> /xwiki/bin/get/FlamingoThemes/Cerulean?xpage=xpart&vm=previewactions.vm&xcontinue=javascript:alert(document.domain)
This vulnerability exists since XWiki 6.1-rc-1.
### Patches
The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1.
### Workarounds
It's possible to workaround the vulnerability by editing the template previewactions.vm to perform checks on it, but note that the appropriate fix involves new APIs that have been recently introduced in XWiki. See the referenced
GHSA
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
ghsa·2023-06-20
CVE-2023-35162 [CRITICAL] CWE-79 XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
### Impact
Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS).
It's possible to exploit the previewactions template to perform a XSS, e.g. by using URL such as:
> /xwiki/bin/get/FlamingoThemes/Cerulean?xpage=xpart&vm=previewactions.vm&xcontinue=javascript:alert(document.domain)
This vulnerability exists since XWiki 6.1-rc-1.
### Patches
The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1.
### Workarounds
It's possible to workaround the vulnerability by editing the template previewactions.vm to perform checks on it, but note that the appropriate fix involves new APIs that have been recently introduced in XWiki. See the referenced
No detection rules found.
Nuclei
XWiki < 14.10.5 - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2023-35162 [MEDIUM] XWiki < 14.10.5 - Cross-Site Scripting
XWiki < 14.10.5 - Cross-Site Scripting
XWiki Platform is vulnerable to reflected XSS via the previewactions template. An attacker can inject JavaScript through the xcontinue parameter.
Template:
id: CVE-2023-35162
info:
name: XWiki < 14.10.5 - Cross-Site Scripting
author: ritikchaddha
severity: medium
description: |
XWiki Platform is vulnerable to reflected XSS via the previewactions template. An attacker can inject JavaScript through the xcontinue parameter.
impact: |
Successful exploitation could lead to unauthorized access or data theft.
remediation: |
Apply the latest patches provided by XWiki to mitigate the vulnerability.
reference:
- https://jira.xwiki.org/browse/XWIKI-20342
- https://github.com/xwiki/xwiki-platform/blob/244dbbaa0738a0c40b19929c0369c8b62ae5236e/xwiki-platform-co
https://github.com/xwiki/xwiki-platform/commit/9f01166b1a8ee9639666099eb5040302df067e4dhttps://github.com/xwiki/xwiki-platform/security/advisories/GHSA-q9hg-9qj2-mxf9https://jira.xwiki.org/browse/XWIKI-20342https://jira.xwiki.org/browse/XWIKI-20583https://github.com/xwiki/xwiki-platform/commit/9f01166b1a8ee9639666099eb5040302df067e4dhttps://github.com/xwiki/xwiki-platform/security/advisories/GHSA-q9hg-9qj2-mxf9https://jira.xwiki.org/browse/XWIKI-20342https://jira.xwiki.org/browse/XWIKI-20583
2023-06-23
Published