XWiki Platform <=15.6RC1 Solr Search Suggestion Info Disclosure
CVE-2023-48241 Published on November 20, 2023
XWiki exposed whole content of all documents of all wikis to anybody with view right on Solr suggest service
XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr-based search suggestion provider that also duplicates as generic JavaScript API for search results in XWiki exposes the content of all documents of all wikis to anybody who has access to it, by default it is public. This exposes all information stored in the wiki (but not some protected information like password hashes). While there is a right check normally, the right check can be circumvented by explicitly requesting fields from Solr that don't include the data for the right check. This has been fixed in XWiki 15.6RC1, 15.5.1 and 14.10.15 by not listing documents whose rights cannot be checked. No known workarounds are available.
Vulnerability Analysis
CVE-2023-48241 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CVE-2023-48241 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2023-48241
Want to know whenever a new CVE is published for Xwiki? stack.watch will email you.
Affected Versions
xwiki-platform:- Version >= 6.3-milestone-2, < 14.10.15 is affected.
- Version >= 15.0-rc-1, < 15.5.1 is affected.
Vulnerable Packages
The following package name and versions may be associated with CVE-2023-48241
| Package Manager | Vulnerable Package | Versions | Fixed In |
|---|---|---|---|
| maven | org.xwiki.platform:xwiki-platform-search-solr-query | >= 6.3-milestone-2, < 14.10.15 | 14.10.15 |
| maven | org.xwiki.platform:xwiki-platform-search-solr-query | >= 15.0-rc-1, < 15.5.1 | 15.5.1 |
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.