Aller au contenu principal
after\"/}}`. Therefore, this can also be exploited by users without script right and in comments. With the interaction of a user with more rights, this could be used to execute arbitrary actions in the wiki, including privilege escalation, remote code execution, information disclosure, modifying or deleting content. This has been patched in XWiki 14.9, 14.4.6, and 13.10.10.\n"}},{"@type":"Question","name":"CVE-2023-29207 est-elle activement exploitée ?","acceptedAnswer":{"@type":"Answer","text":"Aucune exploitation active de CVE-2023-29207 n’est confirmée. Le score EPSS est de 2.1 %, soit la probabilité estimée d’exploitation dans les 30 prochains jours."}},{"@type":"Question","name":"Quel est le score CVSS de CVE-2023-29207 ?","acceptedAnswer":{"@type":"Answer","text":"CVE-2023-29207 a un score de base CVSS v3 de 9 (gravité CRITICAL)."}}]}
CRITICAL

CVE-2023-29207

CVSS v3

9

CRITICAL

Score EPSS

2.1 %

probabilité d’exploitation

CISA KEV

Non

exploitation connue

Exploitation

—

statut SSVC

Description

XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't properly sanitizing column names, thus allowing the insertion of raw HTML code including JavaScript. This vulnerability was also exploitable via the Documents Macro that is included since XWiki 3.5M1 and doesn't require script rights, this can be demonstrated with the syntax `{{documents id="example" count="5" actions="false" columns="doc.title, before<script>alert(1)</script>after"/}}`. Therefore, this can also be exploited by users without script right and in comments. With the interaction of a user with more rights, this could be used to execute arbitrary actions in the wiki, including privilege escalation, remote code execution, information disclosure, modifying or deleting content. This has been patched in XWiki 14.9, 14.4.6, and 13.10.10.

Détails techniques

Publiée le
2023-04-15

Questions fréquentes

Qu’est-ce que CVE-2023-29207 ?

XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't properly sanitizing column names, thus allowing the insertion of raw HTML code including JavaScript. This vulnerability was also exploitable via the Documents Macro that is included since XWiki 3.5M1 and doesn't require script rights, this can be demonstrated with the syntax `{{documents id="example" count="5" actions="false" columns="doc.title, before<script>alert(1)</script>after"/}}`. Therefore, this can also be exploited by users without script right and in comments. With the interaction of a user with more rights, this could be used to execute arbitrary actions in the wiki, including privilege escalation, remote code execution, information disclosure, modifying or deleting content. This has been patched in XWiki 14.9, 14.4.6, and 13.10.10.

CVE-2023-29207 est-elle activement exploitée ?

Aucune exploitation active de CVE-2023-29207 n’est confirmée. Le score EPSS est de 2.1 %, soit la probabilité estimée d’exploitation dans les 30 prochains jours.

Quel est le score CVSS de CVE-2023-29207 ?

CVE-2023-29207 a un score de base CVSS v3 de 9 (gravité CRITICAL).

CVE-2023-29207 touche-t-elle votre environnement ?

Utilisez isMalicious pour vérifier si l’une de vos IP ou l’un de vos domaines est associé aux IOC de cette vulnérabilité.

Vérifier une IPRechercher des CVEIntégrations SIEM et TIP

Sans carte bancaire · 500 vérifications gratuites par mois · Clé API gratuite

Autres vulnérabilités 2023 à trier

Classées par probabilité d’exploitation (EPSS).

Retour à la base de CVE