CVE-2023-50722

Summary

CVE-2023-50722 is a critical vulnerability affecting the XWiki Platform, a popular wiki solution. This issue, impacting versions prior to 14.10.15, 15.5.2, and 15.7-rc-1, allows for reflected XSS and remote code execution through maliciously crafted URLs. The vulnerability doesn't require attacker access to the wiki, only tricking an admin user to visit the URL. Successful exploitation grants full remote code execution with programming rights, putting the entire XWiki installation at risk for confidentiality, integrity, and availability issues. The vulnerability has been addressed in versions 14.10.15, 15.5.2, and 15.7-rc-1; users can apply the patch manually to the `XWiki.ConfigurableClass` document.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.