Description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to break many translations coming from wiki pages by creating a corrupted document containing a translation object. This will lead to a broken page. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11. Users are advised to upgrade. There are no workarounds other than fixing any way to create a document that fail to load.
Published: 2023-04-18
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-1252 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to break many translations coming from wiki pages by creating a corrupted document containing a translation object. This will lead to a broken page. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11. Users are advised to upgrade. There are no workarounds other than fixing any way to create a document that fail to load.
Github GHSA Github GHSA GHSA-9jq5-xwqw-q8j3 XWiki Platform vulnerable to page render failure due to broken translations
History

Wed, 05 Feb 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Xwiki Xwiki
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-02-05T18:44:17.809Z

Reserved: 2023-04-07T18:56:54.628Z

Link: CVE-2023-29520

cve-icon Vulnrichment

Updated: 2024-08-02T14:07:46.410Z

cve-icon NVD

Status : Modified

Published: 2023-04-19T00:15:08.747

Modified: 2024-11-21T07:57:13.357

Link: CVE-2023-29520

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses