XWiki Platform vulnerable to page render failure due to broken translations
Moderate severity
GitHub Reviewed
Published
Apr 18, 2023
in
xwiki/xwiki-platform
•
Updated Nov 4, 2023
Package
Affected versions
>= 4.3-milestone-2, < 13.10.11
>= 14.0-rc-1, < 14.4.8
>= 14.5, < 14.10.1
Patched versions
13.10.11
14.4.8
14.10.1
Description
Published by the National Vulnerability Database
Apr 19, 2023
Published to the GitHub Advisory Database
Apr 20, 2023
Reviewed
Apr 20, 2023
Last updated
Nov 4, 2023
Impact
It's possible to break many translations coming from wiki pages by creating a corrupted document containing a translation object.
Patches
The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11.
Workarounds
There is no other workaround other than fixing any way to create a document that fail to load.
References
https://jira.xwiki.org/browse/XWIKI-20460
For more information
If you have any questions or comments about this advisory:
References