CVE-2022-29253

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 25/05/2022 Updated: 07/06/2022

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 2.7 | Impact Score: 1.4 | Exploitability Score: 1.2

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with version 8.3-rc-1 and prior to versions 12.10.3 and 14.0, one can ask for any file located in the classloader using the template API and a path with ".." in it. The issue is patched in versions 14.0 and 13.10.3. There is no easy workaround for this issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xwiki xwiki 8.3
xwiki xwiki

CWE-22 https://github.com/xwiki/xwiki-platform/commit/4917c8f355717bb636d763844528b1fe0f95e8e2 https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9qrp-h7fw-42hg https://jira.xwiki.org/browse/XWIKI-19349 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-29253

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect