CVE-2023-29520

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-29520

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-29520.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-29520

Aliases

GHSA-9jq5-xwqw-q8j3

Published

2023-04-18T23:33:41Z

Modified

2026-10-28T02:30:40Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Summary

Page render failure due to broken translations in xwiki-platform

Details

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to break many translations coming from wiki pages by creating a corrupted document containing a translation object. This will lead to a broken page. The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11. Users are advised to upgrade. There are no workarounds other than fixing any way to create a document that fail to load.

Database specific

{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-248"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29520.json"
}

References

Affected packages

Git / github.com/xwiki/xwiki-commons

Affected ranges

Type

GIT

Repo

https://github.com/xwiki/xwiki-commons

Events

Introduced

Fixed

8d72461ba6976af6005e2df511bdeeeb17ef2d74

Introduced

491547c4f74b9be58123ef22081ae7e6840a11c7

Fixed

48ee3193230753aecf8a86d7c8ff3e8f869e8330

Introduced

bae1e23e73cafc007e5f28b39a04bfa0acf0199c

Fixed

92a80f0a6344f8c7efb8373f8604d007e775625b

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "13.10.11"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "14.0"
                },
                {
                    "fixed":  "14.4.8"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "14.5"
                },
                {
                    "fixed":  "14.10.1"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Type

GIT

Repo

https://github.com/xwiki/xwiki-platform

Events

Introduced

Fixed

08e0887f0362b21614e6bfcb5be7e1f568659c41

Introduced

d971304b0e0bf4f6dad278de89518edc17459741

Fixed

b469b950e7fe3d22f00b639d43f286bf871472b1

Introduced

ab4dfeaeef13360eebcaa507bc652073aa89a427

Fixed

8f86c33eaa61f634015ab3806f25f9bf0c82638d

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "13.10.11"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "14.0"
                },
                {
                    "fixed":  "14.4.8"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "14.5"
                },
                {
                    "fixed":  "14.10.1"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

xwiki-commons-13.*

xwiki-commons-13.10

xwiki-commons-13.10-rc-1

xwiki-commons-13.10.1

xwiki-commons-13.10.10

xwiki-commons-13.10.2

xwiki-commons-13.10.3

xwiki-commons-13.10.4

xwiki-commons-13.10.5

xwiki-commons-13.10.6

xwiki-commons-13.10.7

xwiki-commons-13.10.8

xwiki-commons-13.10.9

xwiki-commons-14.*

xwiki-commons-14.10

xwiki-commons-14.4

xwiki-commons-14.4-rc-1

xwiki-commons-14.4.1

xwiki-commons-14.4.2

xwiki-commons-14.4.3

xwiki-commons-14.4.4

xwiki-commons-14.4.5

xwiki-commons-14.4.6

xwiki-commons-14.4.7

xwiki-commons-8.*

xwiki-commons-8.0-milestone-1

xwiki-commons-8.0-milestone-2

xwiki-commons-8.1-milestone-1

xwiki-commons-8.1-milestone-2

xwiki-commons-8.2-milestone-1

xwiki-commons-8.2-milestone-2

xwiki-commons-8.3-milestone-1

xwiki-commons-8.3-milestone-2

xwiki-platform-13.*

xwiki-platform-13.10

xwiki-platform-13.10-rc-1

xwiki-platform-13.10.1

xwiki-platform-13.10.10

xwiki-platform-13.10.2

xwiki-platform-13.10.3

xwiki-platform-13.10.4

xwiki-platform-13.10.5

xwiki-platform-13.10.6

xwiki-platform-13.10.7

xwiki-platform-13.10.9

xwiki-platform-14.*

xwiki-platform-14.10

xwiki-platform-14.4

xwiki-platform-14.4-rc-1

xwiki-platform-14.4.1

xwiki-platform-14.4.2

xwiki-platform-14.4.3

xwiki-platform-14.4.4

xwiki-platform-14.4.5

xwiki-platform-14.4.6

xwiki-platform-14.4.7

xwiki-platform-7.*

xwiki-platform-7.3-milestone-2

xwiki-platform-7.4-milestone-1

xwiki-platform-7.4-milestone-2

xwiki-platform-8.*

xwiki-platform-8.0-milestone-1

xwiki-platform-8.0-milestone-2

xwiki-platform-8.1-milestone-1

xwiki-platform-8.1-milestone-2

xwiki-platform-8.2-milestone-1

xwiki-platform-8.2-milestone-2

xwiki-platform-8.3-milestone-1

xwiki-platform-9.*

xwiki-platform-9.9-rc-2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-29520.json"