CVE-2023-48241
XWiki exposed whole content of all documents of all wikis to anybody with view right on Solr suggest service
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr-based search suggestion provider that also duplicates as generic JavaScript API for search results in XWiki exposes the content of all documents of all wikis to anybody who has access to it, by default it is public. This exposes all information stored in the wiki (but not some protected information like password hashes). While there is a right check normally, the right check can be circumvented by explicitly requesting fields from Solr that don't include the data for the right check. This has been fixed in XWiki 15.6RC1, 15.5.1 and 14.10.15 by not listing documents whose rights cannot be checked. No known workarounds are available.
XWiki Platform es una plataforma wiki genérica. A partir de la versión 6.3-milestone-2 y antes de las versiones 14.10.15, 15.5.1 y 15.6RC1, el proveedor de sugerencias de búsqueda basado en Solr que también se duplica como API JavaScript genérica para los resultados de búsqueda en XWiki expone el contenido de todos los documentos de todos los wikis a cualquiera que tenga acceso a ellos, por defecto es público. Esto expone toda la información almacenada en el wiki (pero no parte de la información protegida como los hashes de contraseñas). Si bien normalmente existe una verificación correcta, esta se puede eludir solicitando explícitamente campos de Solr que no incluyan los datos para la verificación correcta. Esto se solucionó en XWiki 15.6RC1, 15.5.1 y 14.10.15 al no enumerar los documentos cuyos derechos no se pueden verificar. No hay workarounds conocidos disponibles.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-11-13 CVE Reserved
- 2023-11-20 CVE Published
- 2024-08-02 CVE Updated
- 2024-09-26 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-285: Improper Authorization
CAPEC
References (3)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/xwiki/xwiki-platform/commit/93b8ec702d7075f0f5794bb05dfb651382596764 | 2023-11-29 |
| URL | Date | SRC |
|---|---|---|
| https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7fqr-97j7-jgf4 | 2023-11-29 | |
| https://jira.xwiki.org/browse/XWIKI-21138 | 2023-11-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Xwiki Search vendor "Xwiki" | Xwiki Search vendor "Xwiki" for product "Xwiki" | >= 6.4 < 14.10.5 Search vendor "Xwiki" for product "Xwiki" and version " >= 6.4 < 14.10.5" | - |
Affected
| ||||||
| Xwiki Search vendor "Xwiki" | Xwiki Search vendor "Xwiki" for product "Xwiki" | >= 15.0 < 15.5.1 Search vendor "Xwiki" for product "Xwiki" and version " >= 15.0 < 15.5.1" | - |
Affected
| ||||||
| Xwiki Search vendor "Xwiki" | Xwiki Search vendor "Xwiki" for product "Xwiki" | 6.3 Search vendor "Xwiki" for product "Xwiki" and version "6.3" | milestone2 |
Affected
| ||||||
| Xwiki Search vendor "Xwiki" | Xwiki Search vendor "Xwiki" for product "Xwiki" | 6.3 Search vendor "Xwiki" for product "Xwiki" and version "6.3" | rc1 |
Affected
| ||||||