The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in its lack of protection for website structures. This allows attackers to insert arbitrary information into wiki projects.

🗓️ 07 Sep 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

XWiki Platform lacks protection of page structure, enabling remote insertion of arbitrary data into wiki projects.

Reporter	Title	Published	Views	Family All 11
CNNVD	XWiki Platform 跨站脚本漏洞	23 Jun 202300:00	–	cnnvd
CVE	CVE-2023-34464	23 Jun 202314:44	–	cve
Cvelist	CVE-2023-34464 XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template	23 Jun 202314:44	–	cvelist
EUVD	EUVD-2023-1787	3 Oct 202520:07	–	euvd
Github Security Blog	XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template	20 Jun 202316:44	–	github
NVD	CVE-2023-34464	23 Jun 202315:15	–	nvd
OSV	CVE-2023-34464 XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template	23 Jun 202314:44	–	osv
OSV	GHSA-FP7H-F9F5-X4Q7 XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template	20 Jun 202316:44	–	osv
Prion	Cross site scripting	23 Jun 202315:15	–	prion
RedhatCVE	CVE-2023-34464	23 May 202502:06	–	redhatcve

Source	Link
github	www.github.com/xwiki/xwiki-platform/commit/53e8292a31ec70fba5e1d705a4ac443658b9e6df
jira	www.jira.xwiki.org/browse/XWIKI-20290
github	www.github.com/xwiki/xwiki-platform/security/advisories/GHSA-fp7h-f9f5-x4q7
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-34464
web	www.web.nvd.nist.gov/view/vuln/detail

07 Sep 2023 00:00Current

6Medium risk

Vulners AI Score6

CVSS 39

CVSS 210

EPSS0.00714

XWiki Platform page structure data insertion remote exploitation wiki projects