CVE-2023-36468— XWiki Platform 安全漏洞
一分钟漏洞结论
影响对象
xwiki xwiki-platform
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
XWiki Platform是法国XWiki基金会的一套用于创建Web协作应用程序的Wiki平台。 XWiki Platform 2.0到14.10.7版本、 15.0-rc-1到 15.2-rc-1版本存在安全漏洞，该漏洞源于在某些情况下，仍然有可能利用新版本中修复的漏洞，例如：当 XWiki 从修复之前的版本（例如 14.3）升级到包含修复的版本（例如 14.4）时，仍然可以通过将“rev=1.1”添加到重现步骤中使用的 URL 来重现该漏洞，即使升级后也可以远程执行代码。
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2023-36468 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Upgrading doesn't prevent exploiting vulnerable XWiki documents
来源: CVE Program / CVE List V5
Vulnerability Description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an XWiki installation is upgraded and that upgrade contains a fix for a bug in a document, just a new version of that document is added. In some cases, it's still possible to exploit the vulnerability that was fixed in the new version. The severity of this depends on the fixed vulnerability, for the purpose of this advisory take CVE-2022-36100/GHSA-2g5c-228j-p52x as example - it is easily exploitable with just view rights and critical. When XWiki is upgraded from a version before the fix for it (e.g., 14.3) to a version including the fix (e.g., 14.4), the vulnerability can still be reproduced by adding `rev=1.1` to the URL used in the reproduction steps so remote code execution is possible even after upgrading. Therefore, this affects the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability also affects manually added script macros that contained security vulnerabilities that were later fixed by changing the script macro without deleting the versions with the security vulnerability from the history. This vulnerability doesn't affect freshly installed versions of XWiki. Further, this vulnerability doesn't affect content that is only loaded from the current version of a document like the code of wiki macros or UI extensions. This vulnerability has been patched in XWiki 14.10.7 and 15.2RC1 by forcing old revisions to be executed in a restricted mode that disables all script macros. As a workaround, admins can manually delete old revisions of affected documents. A script could be used to identify all installed documents and delete the history for them. However, also manually added and later corrected code may be affected by this vulnerability so it is easy to miss documents.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
清理环节不完整
来源: CVE Program / CVE List V5
Vulnerability Title
XWiki Platform 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
XWiki Platform是法国XWiki基金会的一套用于创建Web协作应用程序的Wiki平台。 XWiki Platform 2.0到14.10.7版本、 15.0-rc-1到 15.2-rc-1版本存在安全漏洞，该漏洞源于在某些情况下，仍然有可能利用新版本中修复的漏洞，例如：当 XWiki 从修复之前的版本（例如 14.3）升级到包含修复的版本（例如 14.4）时，仍然可以通过将“rev=1.1”添加到重现步骤中使用的 URL 来重现该漏洞，即使升级后也可以远程执行代码。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| xwiki | xwiki-platform | >= 2.0, < 14.10.7 | - |
|
二、漏洞 CVE-2023-36468 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2023-36468 的情报信息
请登录查看更多情报信息。
CVE-2023-36468 补丁与修复 (1)
CVE-2023-36468 厂商安全公告 (1)
CVE-2023-36468 其他参考 (1)
-
https://jira.xwiki.org/browse/XWIKI-20594 x_refsource_MISC
同批安全公告 · xwiki · 2023-06-29 · 共 4 条
| CVE-2023-36469 | 10.0 CRITICAL | XWiki Platform 注入漏洞 |
| CVE-2023-36470 | 10.0 CRITICAL | XWiki Platform 注入漏洞 |
| CVE-2023-36471 | 9.1 CRITICAL | XWiki Commons 跨站脚本漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2023-36468
暂无评论