CVE-2024-31988

🗓️ 10 Apr 2024 20:40:36Reported by GitHub_MType

XWiki Platform 13.9-rc-1 prior to 4.10.19, 15.5.4, 15.10-rc-1 allows arbitrary remote code executio

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-31988	21 Feb 202517:18	–	circl
CNNVD	XWiki Platform 安全漏洞	10 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-31988 XWiki Platform CSRF remote code execution through the realtime HTML Converter API	10 Apr 202420:40	–	cvelist
EUVD	EUVD-2024-1290	10 Apr 202420:40	–	euvd
Github Security Blog	XWiki Platform CSRF remote code execution through the realtime HTML Converter API	10 Apr 202417:14	–	github
NVD	CVE-2024-31988	10 Apr 202421:15	–	nvd
OpenVAS	XWiki 13.9-rc-1 < 14.10.19, 15.0-rc-1 < 15.5.4, 15.6-rc-1 < 15.9 RCE Vulnerability (GHSA-r5vh-gc3r-r24w)	15 Apr 202400:00	–	openvas
OSV	CVE-2024-31988 XWiki Platform CSRF remote code execution through the realtime HTML Converter API	10 Apr 202420:40	–	osv
OSV	GHSA-R5VH-GC3R-R24W XWiki Platform CSRF remote code execution through the realtime HTML Converter API	10 Apr 202417:14	–	osv
Positive Technologies	PT-2024-24338 · Xwiki · Xwiki Platform	10 Apr 202400:00	–	ptsecurity

NVD

Vulners

Vulnrichment

Node

xwiki xwikiRange13.9–14.10.19

xwiki xwikiRange15.0–15.5.4

xwiki xwikiRange15.6–15.9

[
  {
    "vendor": "xwiki",
    "product": "xwiki-platform",
    "versions": [
      {
        "version": ">= 13.9-rc-1, < 14.10.19",
        "status": "affected"
      },
      {
        "version": ">= 15.0-rc-1, < 15.5.4",
        "status": "affected"
      },
      {
        "version": ">= 15.6-rc-1, < 15.9",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/xwiki/xwiki-platform/commit/d88da4572fb7d4f95e1f54bb0cce33fce3df08d9
jira	www.jira.xwiki.org/browse/XWIKI-21424
github	www.github.com/xwiki/xwiki-platform/commit/4896712ee6483da623f131be2e618f1f2b79cb8d
github	www.github.com/xwiki/xwiki-platform/commit/d9f5043da289ff106f08e23576746fd8baf98794
github	www.github.com/xwiki/xwiki-platform/commit/9f8cc88497418750b09ce9fde5d67d840f038fbf
github	www.github.com/xwiki/xwiki-platform/security/advisories/GHSA-r5vh-gc3r-r24w

09 Jan 2025 18:54Current

9.2High risk

Vulners AI Score9.2

CVSS 3.18.8 - 9.6

EPSS0.06899

SSVC

CWE-352