What is GHSA-2jhm-qp48-hv5j?

GHSA-2jhm-qp48-hv5j is a security advisory published by GitHub Security Advisories with Medium severity. Missing authorization in xwiki-platform

Which CVE IDs does GHSA-2jhm-qp48-hv5j cover?

GHSA-2jhm-qp48-hv5j covers the following CVE IDs: CVE-2022-23621. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2jhm-qp48-hv5j?

GHSA-2jhm-qp48-hv5j has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

Which products are affected by GHSA-2jhm-qp48-hv5j?

GHSA-2jhm-qp48-hv5j affects 3 products, including: maven/org.xwiki.platform:xwiki-platform-oldcore:\u003e= 13.6-rc-1, \u003c= 13.6; maven/org.xwiki.platform:xwiki-platform-oldcore:\u003e= 13.0.0, \u003c 13.4.3; maven/org.xwiki.platform:xwiki-platform-oldcore:\u003c 12.10.9.

GHSA-2jhm-qp48-hv5jMediumCVSS 5.5

Missing authorization in xwiki-platform

Vendor

GitHub Security Advisories

Published

February 9, 2022

Last Modified

July 13, 2023

🔗 CVE IDs covered (1)

CVE-2022-23621 →

📋 Description

Impact

Any user with SCRIPT right (EDIT right before XWiki 7.4) can read any file located in the XWiki WAR (for example xwiki.cfg and xwiki.properties) through XWiki#invokeServletAndReturnAsString:

$xwiki.invokeServletAndReturnAsString("/WEB-INF/xwiki.cfg")

Patches

It has been patched in XWiki versions 12.10.9, 13.4.3 and 13.7-rc-1.

Workarounds

The only workaround is to give SCRIPT right only to trusted users.

References

https://jira.xwiki.org/browse/XWIKI-18870

For more information

If you have any questions or comments about this advisory:

Open an issue in Jira XWiki
Email us at our security mailing list

🎯 Affected products3

maven/org.xwiki.platform:xwiki-platform-oldcore:>= 13.6-rc-1, <= 13.6
maven/org.xwiki.platform:xwiki-platform-oldcore:>= 13.0.0, < 13.4.3
maven/org.xwiki.platform:xwiki-platform-oldcore:< 12.10.9