PT-2023-8612 · Xwiki · Xwiki Platform

🗓️ 18 Apr 2023 00:00:00Reported by Positive TechnologiesType

XWiki Platform is vulnerable to code injection affecting versions before 14.10.3, 14.4.8, and 15.0-rc-1

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-29525	19 Apr 202307:43	–	circl
CNNVD	XWiki Platform 注入漏洞	18 Apr 202300:00	–	cnnvd
CVE	CVE-2023-29525	18 Apr 202323:01	–	cve
Cvelist	CVE-2023-29525 Privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platform	18 Apr 202323:01	–	cvelist
Github Security Blog	XWiki Platform vulnerable to privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration	20 Apr 202322:25	–	github
NVD	CVE-2023-29525	19 Apr 202300:15	–	nvd
OpenVAS	XWiki 12.6.1 < 13.10.11, 14.0-rc-1 < 14.4.8, 14.5 < 14.10.3 Privilege Escalation Vulnerability (GHSA-jgg7-w2rj-58cj)	18 Jul 202300:00	–	openvas
OSV	CVE-2023-29525 Privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platform	18 Apr 202323:01	–	osv
OSV	GHSA-JGG7-W2RJ-58CJ XWiki Platform vulnerable to privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration	20 Apr 202322:25	–	osv
Prion	Code injection	19 Apr 202300:15	–	prion

Source	Link
github	www.github.com/xwiki/xwiki-platform/security/advisories/GHSA-jgg7-w2rj-58cj
jira	www.jira.xwiki.org/browse/XWIKI-20287
github	www.github.com/xwiki/xwiki-platform/commit/6d74e2e4aa03d19f0be385ab63ae9e0f0e90a766
github	www.github.com/xwiki/xwiki-platform/commit/8e7c7f90f2ddaf067cb5b83b181af41513028754
bdu	www.bdu.fstec.ru/vul/2024-01265
osv	www.osv.dev/vulnerability/CVE-2023-29525
osv	www.osv.dev/vulnerability/GHSA-jgg7-w2rj-58cj
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-29525
github	www.github.com/xwiki/xwiki-platform
t	www.t.me/cibsecurity/62437

01 May 2023 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.8 - 9.9

EPSS0.54257

SSVC