CVE-2022-23620: Path traversal in xwiki-platform-skin-skinx
Summary
CVE-2022-23620: Path traversal in xwiki-platform-skin-skinx. Affects org.xwiki.platform:xwiki-platform-skin-skinx versions >= 6.2-rc-1, < 13.6. Fixed in 13.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
XWiki Platform is a generic wiki platform that provides runtime services for applications built on top of it. The xwiki-platform-skin-skinx package is a component of XWiki Platform that handles the skinning functionality. It allows users to customize the appearance of their XWiki applications. However, a vulnerability has been discovered in the package that allows for path traversal attacks.
Vulnerability Detail
The vulnerability, identified as CVE-2022-23620, exists in the AbstractSxExportURLFactoryActionHandler#processSx function of xwiki-platform-skin-skinx. This function fails to properly escape elements from the SSX document reference when serializing it on the filesystem. As a result, an attacker can exploit this flaw by injecting filesystem syntax like "../", "./", or "/" in reference elements, leading to path traversal attacks. This can potentially allow an attacker to access sensitive files or directories on the server. The vulnerability has a CVSS score of 6.8, indicating a moderate severity level.
How To Fix
Minimum fixed version
13.6
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, it is advised to give script or subwiki admin rights only to trusted individuals. Additionally, disabling HTML/PDF export can help mitigate the risk of exploitation. By implementing these measures, the likelihood of an attacker exploiting the vulnerability can be reduced.
Conclusion
In conclusion, the xwiki-platform-skin-skinx package in XWiki Platform is vulnerable to a path traversal attack. This can allow an attacker to access sensitive files or directories on the server. To mitigate this vulnerability, it is recommended to update the package to version 13.6 or later. Giving script or subwiki admin rights only to trusted individuals and disabling HTML/PDF export can also provide temporary mitigation. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for org.xwiki.platform:xwiki-platform-skin-skinx →
FAQ
XWiki Platform is a generic wiki platform that provides runtime services for applications built on top of it. It offers a range of features and functionalities for creating collaborative websites and applications.
xwiki-platform-skin-skinx is a package in XWiki Platform that handles the skinning functionality. It allows users to customize the appearance of their XWiki applications.
Path traversal is a type of vulnerability that allows an attacker to access files or directories outside of the intended scope. By manipulating file paths or references, an attacker can navigate to sensitive areas of the file system.
This vulnerability can allow an attacker to access sensitive files or directories on the server. Depending on the permissions of the user running the XWiki application, this could lead to unauthorized access, data leakage, or further exploitation of the system.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the pom.xml file to analyze dependencies.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.xwiki.platform:xwiki-platform-skin-skinx.
