3556 matches found
GHSA-XWPH-X6XJ-WGGV org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
Impact It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as //mydomain.com i.e. omitting the http:. It was also possible to bypass it when using URL such as http:/mydomain.com. Patches The problem has been patched on XWiki 13.10.1...
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
Impact It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as //mydomain.com i.e. omitting the http:. It was also possible to bypass it when using URL such as http:/mydomain.com. Patches The problem has been patched on XWiki 13.10.1...
org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability
Impact The RSS macro that is bundled in XWiki included the content of the feed items without any cleaning in the HTML output when the parameter content was set to true. This allowed arbitrary HTML and in particular also JavaScript injection and thus cross-site scripting XSS by specifying an RSS...
GHSA-C885-89FW-55QR org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability
Impact The RSS macro that is bundled in XWiki included the content of the feed items without any cleaning in the HTML output when the parameter content was set to true. This allowed arbitrary HTML and in particular also JavaScript injection and thus cross-site scripting XSS by specifying an RSS...
GHSA-M3JR-CVHJ-F35J org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
Impact The "restricted" mode of the HTML cleaner in XWiki, introduced in version 4.2-milestone-1, only escaped and -tags but neither attributes that can be used to inject scripts nor other dangerous HTML tags like . As a consequence, any code relying on this "restricted" mode for security is...
GHSA-RFH6-MG6H-H668 xwiki-platform-administration-ui vulnerable to privilege escalation
Impact Any user with edit rights on a page e.g., it's own user page, can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the section ids in XWiki.AdminFieldsDisplaySheet. This page is installed by...
xwiki-platform-administration-ui vulnerable to privilege escalation
Impact Any user with edit rights on a page e.g., it's own user page, can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the section ids in XWiki.AdminFieldsDisplaySheet. This page is installed by...
GHSA-VRR8-FP7C-7QGP org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation
Impact Any user with the right to add an object on a page can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the styles properties FlamingoThemesCode.WebHome. This page is installed by default...
org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation
Impact Any user with the right to add an object on a page can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the styles properties FlamingoThemesCode.WebHome. This page is installed by default...
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
Impact Any user with view rights on commonly accessible documents can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the documentTree macro parameters in This macro is installed by default in...
GHSA-F4V8-58F6-MWJ4 org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
Impact Any user with view rights on commonly accessible documents can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the documentTree macro parameters in This macro is installed by default in...
org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Basic Cross-site Scripting
Impact A user without script rights can introduce a stored XSS by using the Live Data macro, if the last author of the content of the page has script rights. For instance, by adding the LiveData below in the about section of the profile of a user created by an admin. javascript liveData id="movie...
GHSA-HMM7-6PH9-8JF2 org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Basic Cross-site Scripting
Impact A user without script rights can introduce a stored XSS by using the Live Data macro, if the last author of the content of the page has script rights. For instance, by adding the LiveData below in the about section of the profile of a user created by an admin. javascript liveData id="movie...
org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors
Impact The Document script API returns directly a DocumentAuthors allowing to set any authors to the document, which in consequence can allow subsequent executions of scripts since this author is used for checking rights. Example of such attack: velocity...
GHSA-PWFV-3CVG-9M4C org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors
Impact The Document script API returns directly a DocumentAuthors allowing to set any authors to the document, which in consequence can allow subsequent executions of scripts since this author is used for checking rights. Example of such attack: velocity...
org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticate endpoints
Impact It was possible to inject some code using the URL of authenticate endpoints, e.g.: https://hostname/xwiki/authenticate/wiki/xwiki%22onload=%22alertorigin%22/resetpassword This vulnerability was present in recent versions of XWiki: - 13.10.8+ - 14.4.3+ - 14.6+ Patches This problem has been...
GHSA-JJM5-5V9V-7HX2 org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticate endpoints
Impact It was possible to inject some code using the URL of authenticate endpoints, e.g.: https://hostname/xwiki/authenticate/wiki/xwiki%22onload=%22alertorigin%22/resetpassword This vulnerability was present in recent versions of XWiki: - 13.10.8+ - 14.4.3+ - 14.6+ Patches This problem has been...
GHSA-QX9H-C5V6-GHQH org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
Impact Any user with edit rights can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the included pages in the IncludedDocuments panel. Precondition: As an admin, add the Panels.IncludedDocuments...
org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
Impact Any user with edit rights can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installation. The root cause is improper escaping of the included pages in the IncludedDocuments panel. Precondition: As an admin, add the Panels.IncludedDocuments...