CVE-2023-48241
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-48241 is a vulnerability affecting the XWiki Platform, a generic wiki solution. Versions 6.3-milestone-2 and earlier, up to 15.6RC1, contain a flaw in the Solr-based search suggestion provider. By default, this feature exposes the content of all documents from all wikis to anyone with access, potentially leaking sensitive information. The issue arises because access checks can be bypassed by explicitly requesting certain fields from Solr. This vulnerability has been addressed in XWiki 15.6RC1, 15.5.1, and 14.10.15 by preventing the listing of documents with unchecked access rights. No known workarounds exist to mitigate this issue prior to patching.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Xwiki
Affected Vendors
- xwiki
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions