GHSA-9jq5-xwqw-q8j3MediumCVSS 4.3

XWiki Platform vulnerable to page render failure due to broken translations

Published
April 20, 2023
Last Modified
November 4, 2023

🔗 CVE IDs covered (1)

CVE-2023-29520 →

📋 Description

Impact

It's possible to break many translations coming from wiki pages by creating a corrupted document containing a translation object.

Patches

The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11.

Workarounds

There is no other workaround other than fixing any way to create a document that fail to load.

References

https://jira.xwiki.org/browse/XWIKI-20460

For more information

If you have any questions or comments about this advisory:

🎯 Affected products3

  • maven/org.xwiki.platform:xwiki-platform-localization-source-wiki:>= 4.3-milestone-2, < 13.10.11
  • maven/org.xwiki.platform:xwiki-platform-localization-source-wiki:>= 14.0-rc-1, < 14.4.8
  • maven/org.xwiki.platform:xwiki-platform-localization-source-wiki:>= 14.5, < 14.10.1

🔗 References (4)