CVE-2025-32429

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-32429

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-32429.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-32429

Aliases

GHSA-vr59-gm53-v7cq

Published

2025-07-24T22:22:35.102Z

Modified

2026-07-22T04:01:51.438636Z

Severity

9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter

Details

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. This is fixed in versions 16.10.6 and 17.3.0-rc-1.

Database specific

{
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32429.json",
    "cwe_ids": [
        "CWE-89"
    ]
}

References

Affected packages

Git / github.com/xwiki/xwiki-commons

Affected ranges

Type

GIT

Repo

https://github.com/xwiki/xwiki-commons

Events

Introduced

5d9b843b53012bd07504f3caa092afc2379314e6

Fixed

ea21b6389eb2aeb9660ef5bc0bc38beeac372c9e

Introduced

e84d9bd1b4c0c8219597e10acfd8fbd692416294

Last affected

92d3468f1c4a24e16ee826e4be5eb6e7cb62474a

Database specific

{
    "cpe": "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "9.4"
        },
        {
            "fixed": "16.10.6"
        },
        {
            "introduced": "17.0.0"
        },
        {
            "last_affected": "17.2.2"
        }
    ],
    "source": "CPE_RANGE"
}

Type

GIT

Repo

https://github.com/xwiki/xwiki-platform

Events

Introduced

8e3eba25af152f00028e5daedda783114e4d8680

Fixed

0708ca6ba734c6d79984d887b9afa11d7255d1a0

Introduced

7edb5b7d98170ec081c7e30237971d7dfb8a4401

Fixed

dfd0744e9c18d24ac66a0d261dc6cafd1c209101

Fixed

f502b5d5fd36284a50890ad26d168b7d8dc80bd3

Database specific

{
    "cpe": "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "9.4"
        },
        {
            "fixed": "16.10.6"
        },
        {
            "introduced": "17.0.0"
        },
        {
            "last_affected": "17.2.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Database specific

vanir_signatures_modified

"2026-07-22T04:01:51Z"

vanir_signatures

[
    {
        "target": {
            "function": "checkOrderBySafe",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/query/hql/internal/DefaultHQLStatementValidator.java"
        },
        "id": "CVE-2025-32429-80e78f2e",
        "digest": {
            "function_hash": "103256926916921333354728244922514016711",
            "length": 446.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/xwiki/xwiki-platform/commit/f502b5d5fd36284a50890ad26d168b7d8dc80bd3"
    },
    {
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/query/hql/internal/DefaultHQLStatementValidator.java"
        },
        "id": "CVE-2025-32429-bea32ae2",
        "digest": {
            "line_hashes": [
                "216575233326256981786961415228802532242",
                "265159667122621027536592135804183150038",
                "231904646144242751361284637481877772401",
                "276183770325985981030748634941463723738"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/xwiki/xwiki-platform/commit/f502b5d5fd36284a50890ad26d168b7d8dc80bd3"
    },
    {
        "target": {
            "function": "checkOrderBySafe",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/query/hql/internal/DefaultHQLStatementValidator.java"
        },
        "id": "CVE-2025-32429-f2537e3f",
        "digest": {
            "function_hash": "103256926916921333354728244922514016711",
            "length": 446.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/xwiki/xwiki-platform/commit/dfd0744e9c18d24ac66a0d261dc6cafd1c209101"
    },
    {
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/query/hql/internal/DefaultHQLStatementValidator.java"
        },
        "id": "CVE-2025-32429-fa86eb1d",
        "digest": {
            "line_hashes": [
                "216575233326256981786961415228802532242",
                "265159667122621027536592135804183150038",
                "231904646144242751361284637481877772401",
                "276183770325985981030748634941463723738"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/xwiki/xwiki-platform/commit/dfd0744e9c18d24ac66a0d261dc6cafd1c209101"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-32429.json"