CVE-2023-35155

HIGHNuclei

XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-35155 has a selected CVSS score of 8.8 (high); EIP currently links 1 Nuclei template.

Description

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). For instance, the following URL execute an `alter` on the browser: `<xwiki-host>/xwiki/bin/view/Main/?viewer=share&send=1&target=&target=%3Cimg+src+onerror%3Dalert%28document.domain%29%3E+%3Cimg+src+onerror%3Dalert%28document.domain%29%3E+%3Crenniepak%40intigriti.me%3E&includeDocument=inline&message=I+wanted+to+share+this+page+with+you.`, where `<xwiki-host>` is the URL of your XWiki installation. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.4, and 14.4.8.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 27, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

xwiki-platform

Browse xwiki / xwiki-platform
CVE List>= 2.6-rc-2, < 14.4.8affected
>= 14.5, < 14.10.4affected

org.xwiki.platform:xwiki-platform-sharepage-api

Browse Maven / org.xwiki.platform:xwiki-platform-sharepage-api
GitHub Advisory2.6-rc-2 to < 14.4.8 · Fixed in 14.4.8affected
14.5 to < 14.10.4 · Fixed in 14.10.4affected

Nuclei templates

1
ProjectDiscoveryMEDIUMXWiki - Cross-Site ScriptingCVSS 6.1

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS).

Impact

Successful exploitation could lead to unauthorized access to sensitive information or account takeover

Remediation

Apply the latest security patches provided by XWiki to mitigate the vulnerability

WeaknessesCWE-79
Authorsritikchaddha
Template tagscvecve2023xwikixssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*
Shodan: html:"data-xwiki-reference"
FOFA: body="data-xwiki-reference"
https://jira.xwiki.org/browse/XWIKI-20370 https://nvd.nist.gov/vuln/detail/CVE-2023-35155

Source: ProjectDiscovery

References

5