CVE-2022-36099

🗓️ 08 Sep 2022 20:45:14Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 87 Views🌐 WEB

XWiki Platform Wiki UI Main Wiki software allows arbitrary code execution and content modification via injection vulnerability in versions prior to 13.10.6 and 14.4

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-36099	9 Sep 202200:15	–	circl
CNNVD	XWiki Platform 代码注入漏洞	8 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-36099 XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability	8 Sep 202220:45	–	cvelist
EUVD	EUVD-2022-6981	8 Sep 202220:45	–	euvd
Github Security Blog	XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability	16 Sep 202217:22	–	github
NVD	CVE-2022-36099	8 Sep 202221:15	–	nvd
OpenVAS	XWiki 5.3 < 13.10.6, 14.0 < 14.4 Code Injection Vulnerability (GHSA-xr6m-2p4m-jvqf)	16 Sep 202200:00	–	openvas
OSV	CVE-2022-36099 XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability	8 Sep 202220:45	–	osv
OSV	GHSA-XR6M-2P4M-JVQF XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability	16 Sep 202217:22	–	osv
Prion	Design/Logic Flaw	8 Sep 202221:15	–	prion

NVD

Vulners

Node

xwiki xwikiRange5.4–13.10.6

xwiki xwikiRange14.0–14.4

xwiki xwikiMatch5.3milestone2

[
  {
    "product": "xwiki-platform",
    "vendor": "xwiki",
    "versions": [
      {
        "status": "affected",
        "version": ">= 5.3-milestone-2, < 13.10.6"
      },
      {
        "status": "affected",
        "version": ">= 14.0, < 14.4"
      }
    ]
  }
]

Source	Link
github	www.github.com/xwiki/xwiki-platform/commit/fc77f9f53bc65a4a9bfae3d5686615309c0c76cc
github	www.github.com/xwiki/xwiki-platform/security/advisories/GHSA-xr6m-2p4m-jvqf
jira	www.jira.xwiki.org/browse/XWIKI-19746

Parameter	Position	Path	Description	CWE
XWikiServerClassSheet	query param	XWiki.XWikiServerClassSheet	Arbitrary Groovy/Python/Velocity code execution via URL parameter using XWikiServerClassSheet, bypassing rights checks on affected XWiki Platform versions.	CWE-116, CWE-95, CWE-94
XWikiServerClassSheet	query param	WikiManager.XWikiServerClassSheet	Same vulnerability via WikiManager.XWikiServerClassSheet document, enabling code execution and rights bypass.	CWE-116, CWE-95, CWE-94