CVE-2024-31465

XWiki Platform: Remote code execution from account via SearchSuggestSourceSheet

Severity Score

9.9

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.20, 15.5.4, and 15.9-rc-1, any user with edit right on any page can execute any code on the server by adding an object of type `XWiki.SearchSuggestSourceClass` to their user profile or any other page. This compromises the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10 RC1. As a workaround, manually apply the patch to the document `XWiki.SearchSuggestSourceSheet`.

XWiki Platform es una plataforma wiki genérica. A partir de la versión 5.0-rc-1 y antes de las versiones 14.10.20, 15.5.4 y 15.9-rc-1, cualquier usuario con derecho de edición en cualquier página puede ejecutar cualquier código en el servidor agregando un objeto de tipo `XWiki .SearchSuggestSourceClass` a su perfil de usuario o cualquier otra página. Esto compromete la confidencialidad, integridad y disponibilidad de toda la instalación de XWiki. Esta vulnerabilidad ha sido parcheada en XWiki 14.10.20, 15.5.4 y 15.10 RC1. Como workaround, aplique manualmente el parche al documento `XWiki.SearchSuggestSourceSheet`.

*Credits: N/A

CVSS Scores

GitHubv3.1 9.9

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2024-04-03 CVE Reserved
2024-04-10 CVE Published
2024-04-11 EPSS Updated
2024-08-13 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

CAPEC

References (6)

URL	Tag	Source
https://github.com/xwiki/xwiki-platform/commit/0317a3aa78065e66c86fc725976b06bf7f9b446e	X_refsource_misc
https://github.com/xwiki/xwiki-platform/commit/2740974c32dbb7cc565546d0f04e2374b32b36f7	X_refsource_misc
https://github.com/xwiki/xwiki-platform/commit/6a7f19f6424036fce3d703413137adde950ae809	X_refsource_misc
https://github.com/xwiki/xwiki-platform/commit/6a7f19f6424036fce3d703413137adde950ae809#diff-67b473d2b6397d65b7726c6a13555850b11b10128321adf9e627e656e1d130a5	X_refsource_misc
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-34fj-r5gq-7395	X_refsource_confirm
https://jira.xwiki.org/browse/XWIKI-21474	X_refsource_misc

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Xwiki Search vendor "Xwiki"		Xwiki-platform Search vendor "Xwiki" for product "Xwiki-platform"				>= 5.2.0 < 14.10.20 Search vendor "Xwiki" for product "Xwiki-platform" and version " >= 5.2.0 < 14.10.20"		en		Affected
Xwiki Search vendor "Xwiki"		Xwiki-platform Search vendor "Xwiki" for product "Xwiki-platform"				>= 15.0.0 < 15.5.4 Search vendor "Xwiki" for product "Xwiki-platform" and version " >= 15.0.0 < 15.5.4"		en		Affected
Xwiki Search vendor "Xwiki"		Xwiki-platform Search vendor "Xwiki" for product "Xwiki-platform"				>= 15.6 < 15.10 Search vendor "Xwiki" for product "Xwiki-platform" and version " >= 15.6 < 15.10"		en		Affected