CVE-2023-48241

Summary

CVE-2023-48241 is a vulnerability affecting the XWiki Platform, a generic wiki solution. Versions 6.3-milestone-2 and earlier, up to 15.6RC1, contain a flaw in the Solr-based search suggestion provider. By default, this feature exposes the content of all documents from all wikis to anyone with access, potentially leaking sensitive information. The issue arises because access checks can be bypassed by explicitly requesting certain fields from Solr. This vulnerability has been addressed in XWiki 15.6RC1, 15.5.1, and 14.10.15 by preventing the listing of documents with unchecked access rights. No known workarounds exist to mitigate this issue prior to patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.