CVE-2024-31996

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-31996
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-31996.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-31996
Aliases
Related
Published
2024-04-10T21:15:07Z
Modified
2025-01-10T07:52:27.289687Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, the HTML escaping of escaping tool that is used in XWiki doesn't escape {, which, when used in certain places, allows XWiki syntax injection and thereby remote code execution. The vulnerability has been fixed in XWiki 14.10.19, 15.5.5, and 15.9 RC1. Apart from upgrading, there is no generic workaround. However, replacing $escapetool.html by $escapetool.xml in XWiki documents fixes the vulnerability. In a standard XWiki installation, the maintainers are only aware of the document Panels.PanelLayoutUpdate that exposes this vulnerability, patching this document is thus a workaround. Any extension could expose this vulnerability and might thus require patching, too.

References

Affected packages

Git / github.com/xwiki/xwiki-commons

Affected ranges

Type
GIT
Repo
https://github.com/xwiki/xwiki-commons
Events
Type
GIT
Repo
https://github.com/xwiki/xwiki-platform
Events

Affected versions

xwiki-commons-14.*

xwiki-commons-14.10
xwiki-commons-14.10.1
xwiki-commons-14.10.10
xwiki-commons-14.10.11
xwiki-commons-14.10.12
xwiki-commons-14.10.13
xwiki-commons-14.10.14
xwiki-commons-14.10.15
xwiki-commons-14.10.16
xwiki-commons-14.10.17
xwiki-commons-14.10.18
xwiki-commons-14.10.2
xwiki-commons-14.10.3
xwiki-commons-14.10.4
xwiki-commons-14.10.5
xwiki-commons-14.10.6
xwiki-commons-14.10.7
xwiki-commons-14.10.8
xwiki-commons-14.10.9

xwiki-commons-7.*

xwiki-commons-7.3-milestone-2
xwiki-commons-7.4-milestone-1
xwiki-commons-7.4-milestone-2

xwiki-commons-8.*

xwiki-commons-8.0-milestone-1
xwiki-commons-8.0-milestone-2
xwiki-commons-8.1-milestone-1
xwiki-commons-8.1-milestone-2
xwiki-commons-8.2-milestone-1
xwiki-commons-8.2-milestone-2
xwiki-commons-8.3-milestone-1
xwiki-commons-8.3-milestone-2