CVE-2023-29204 json
URL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcore
published 2023-04-12 3 y ago modified 2026-06-17 4 mo ago also GHSA-xwph-x6xj-wggv , EUVD-2023-1434
- cvss
- 4.7
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.8%
- EPSS 1.8% chance of exploitation in 30 days, percentile 78%
- public exploits
- 0
- none known, plus a Nuclei check
Summary
XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as `//mydomain.com` (i.e. omitting the `http:`). It was also possible to bypass it when using URL such as `http:/mydomain.com`. The problem has been patched on XWiki 13.10.10, 14.4.4 and 14.8RC1.
Patch / fix
- maven org.xwiki.platform:xwiki-platform-oldcore 13.10.10, 14.4.4, 14.8-rc-1
- xwiki xwiki 13.10.10, 14.4.4
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 21 mo ago
Exploit prediction
1.76% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Nuclei template XWiki - Open Redirect nuclei detection template
- github.com https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xwph-x6xj-wggv referenced PoC, tagged "exploit" by a source, unverified
- jira.xwiki.org https://jira.xwiki.org/browse/XWIKI-10309 referenced PoC, tagged "exploit" by a source, unverified
- jira.xwiki.org https://jira.xwiki.org/browse/XWIKI-19994 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 4.7 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N |
| NVD | 3.1 | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| GitHub | 3.1 | 4.7 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | org.xwiki.platform:xwiki-platform-oldcore | >=6.0-rc-1, <13.10.10 >=14.0-rc-1, <14.4.4 >=14.5, <14.8-rc-1 |
13.10.10 14.4.4 14.8-rc-1 |
Affected products
- xwiki xwiki-platform
Classification
- Weakness
-
- CWE-601 URL Redirection to Untrusted Site
References
-
github.com
/xwiki/xwiki-platform/commit/e4f7f68e93cb08c25632c126356d218abf192d1e#diff-c445f288d5d63424f56ef13f65514ab4e17
web, patch
-
github.com
/xwiki/xwiki-platform/security/advisories/GHSA-xwph-x6xj-wggv
web, exploit, patch, vendor-advisory
-
jira.xwiki.org
/browse/XWIKI-10309
web, exploit, issue-tracking
-
jira.xwiki.org
/browse/XWIKI-19994
web, exploit, issue-tracking
-
github.com
/xwiki/xwiki-platform/security/advisories/GHSA-jp55-vvmf-63mv
web
-
nvd.nist.gov
/vuln/detail/CVE-2023-29204
advisory
-
github.com
/xwiki/xwiki-platform
package
Sources
- CVE List CVE-2023-29204
- GitHub Advisory GHSA-xwph-x6xj-wggv
- NVD CVE-2023-29204
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.