CVE-2024-21650

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2024-21650

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-21650.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-21650

Aliases

GHSA-rj7p-xjv7-7229

Published

2024-01-08T15:18:12Z

Modified

2025-11-04T20:17:00.986720Z

Severity

10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

XWiki Remote Code Execution vulnerability via user registration

Details

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution (RCE) attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user registration enabled for guests. This vulnerability has been patched in XWiki 14.10.17, 15.5.3 and 15.8 RC1.

Database specific

{
    "cwe_ids": [
        "CWE-95"
    ]
}

References

Affected packages

Git / github.com/xwiki/xwiki-commons

Affected ranges

Type: GIT
Repo: https://github.com/xwiki/xwiki-commons
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

27bd845c8b9aae7a8dc3569fef195450b70fb552

Git / github.com/xwiki/xwiki-platform

Affected ranges

Type: GIT
Repo: https://github.com/xwiki/xwiki-platform
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

b290bfd573c6f7db6cc15a88dd4111d9fcad0d31

Affected versions

xwiki-application-calendar-1.*

xwiki-application-calendar-1.0

xwiki-platform-7.*

xwiki-platform-7.3-milestone-2

xwiki-platform-7.4-milestone-1

xwiki-platform-7.4-milestone-2

xwiki-platform-8.*

xwiki-platform-8.0-milestone-1

xwiki-platform-8.0-milestone-2

xwiki-platform-8.1-milestone-1

xwiki-platform-8.1-milestone-2

xwiki-platform-8.2-milestone-1

xwiki-platform-8.2-milestone-2

xwiki-platform-8.3-milestone-1

xwiki-platform-9.*

xwiki-platform-9.9-rc-2

xwiki-plugin-tag-1.*

xwiki-plugin-tag-1.1

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/b290bfd573c6f7db6cc15a88dd4111d9fcad0d31",
        "signature_version": "v1",
        "digest": {
            "function_hash": "288078561878504466373252519723630753072",
            "length": 284.0
        },
        "target": {
            "function": "guestUserRegistration",
            "file": "xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/RegisterIT.java"
        },
        "id": "CVE-2024-21650-40c8a2b9",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/b290bfd573c6f7db6cc15a88dd4111d9fcad0d31",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "175442803853742922461492150238275133436",
                "71765174755818887725533376148744752642",
                "37934374062022138351065600132163456558"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-test/xwiki-platform-test-ui/src/main/java/org/xwiki/test/ui/po/RegistrationPage.java"
        },
        "id": "CVE-2024-21650-cebdd0ac",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/b290bfd573c6f7db6cc15a88dd4111d9fcad0d31",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "104413045473487548548668193060640120496",
                "1460516365798456245928448466202536707",
                "172548619734469924652325380243541407036",
                "262796377302179695691559772824394934240",
                "62253929290487379344416087362337644849",
                "2580573261648040646980162221323297038",
                "42865703936887170701511943925167424016",
                "288974411674617570117597818911347241253",
                "169300238375604234849087107698603320821",
                "246788053636501288013308576044135437908",
                "222907227673973632886777389634442839746",
                "198389134930851181179051588258731094619",
                "142762778070723836228260283624162781695",
                "41313528367691492576331625733057135423",
                "315978881197658553043216633365321857127",
                "285660274894165956574292303067980377688",
                "6277476739543256290235613498059101185",
                "269235809708653628000484743576477606475",
                "44346075490175864904190730838550853063",
                "310467508921357572988089382669156754783",
                "144571943749542877952605912765468768160",
                "331842442880865431363668029239866514848",
                "158827370828840800750446679383243321003",
                "107538767371283441227601254523925681300",
                "212815821899597144508440432626028318230",
                "55884225144305736356171436824349901336",
                "91832066745588285902611163222567188266",
                "144285263930697711997275013791736907062",
                "64705500891132007917704463900046959321",
                "214157185670079588357284303390136925209",
                "314998788086415305791170263599765019046",
                "102773042227712380051185624212894701760",
                "193945555105656936453847297800470789796",
                "3191661642231258234321970777397623445",
                "324282386322837417147494231216699917176"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/RegisterIT.java"
        },
        "id": "CVE-2024-21650-e8bc6c24",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/b290bfd573c6f7db6cc15a88dd4111d9fcad0d31",
        "signature_version": "v1",
        "digest": {
            "function_hash": "298543811834509256981739311799218703122",
            "length": 160.0
        },
        "target": {
            "function": "tryToRegister",
            "file": "xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/RegisterIT.java"
        },
        "id": "CVE-2024-21650-ff5e6cf8",
        "deprecated": false,
        "signature_type": "Function"
    }
]