CVE-2023-26475
Assigner: GitHub_M
Published: 2023-03-02T18:07:04.129Z
State: PUBLISHED
title: XWiki Platform vulnerable to Remote Code Execution in Annotations
problemTypes: descriptions: cweId: CWE-270
description: CWE-270: Privilege Context Switching Error
type: CWE
descriptions: cweId: CWE-269
description: CWE-269: Improper Privilege Management
type: CWE
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
affected: vendor: xwiki
product: xwiki-platform
versions: version: >= 2.3-milestone-1, < 13.10.11
status: affected
version: >= 14.0-rc-1, < 14.4.7
status: affected
version: >= 14.5, < 14.10
status: affected
descriptions: value: XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execute the content in a restricted context. This allows executing anything with the right of the author of any document by annotating the document. This has been patched in XWiki 13.10.11, 14.4.7 and 14.10. There is no easy workaround except to upgrade.
source: advisory: GHSA-h6f5-8jj5-cxhr
discovery: UNKNOWN