Auth bypass in Xwiki
CVE-2022-31167
XWiki Platform Security Parent POM contains the security APIs for XWiki Platform, a generic wiki platform. Starting with version 5.0 and prior to 12.10.11, 13.10.1, and 13.4.6, a bug in the security cache stores rules associated to document Page1.Page2 and space Page1.Page2 in the same cache entry. That means that it's possible to overwrite the rights of a space or a document by creating the page of the space with the same name and checking the right of the new one first so that they end up in the security cache and are used for the other too. The problem has been patched in XWiki 12.10.11, 13.10.1, and 13.4.6. There are no known workarounds.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N.
EPSS exploit prediction
EPSS: 0.008 (55.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 56th percentile — 55.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.008 · change: +0.001
Affected products
- Xwiki
- Xwiki Xwiki-Platform — versions >= 5.0, < 12.10.11, >= 13.0, < 13.4.6, >= 13.10, < 13.10.1
Weakness classification (CWE)
Public proof-of-concept exploits
References
- github.com/xwiki/xwiki-platform/security/advisories/GHSA-gg53-wf5x-r3r6 (Exploit, Third Party Advisory, Issue Tracking)
- jira.xwiki.org/browse/XWIKI-14075 (Permissions Required, Vendor Advisory)
- jira.xwiki.org/browse/XWIKI-18983 (Exploit, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-31167?
- CVE-2022-31167 is a high-severity vulnerability in Xwiki, classified under Improper Authorization. CVSS score: 7.1/10. Published 2022-09-07.
- How severe is CVE-2022-31167?
- High severity. CVSS v3 base score is 7.1 out of 10.
- Is CVE-2022-31167 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.