ChatWiki is a collaborative information sharing platform that allows users to create and manage knowledge bases across different tenants. It is mostly used by organizations to maintain and organize their internal documents and knowledge databases efficiently. The platform enables users to set up accounts, share documents, and collaborate on different projects by organizing information into structured pages. It's intended for enterprise environments where security, control, and efficient knowledge management are crucial. ChatWiki facilitates document accessibility and modification across various user levels, supporting enterprise information collaboration needs.
The vulnerability detected in ChatWiki before version 2.10.0 involves inappropriate document page access management across different tenants. This vulnerability manifests when the application's endpoint /manage/getLibRawFileOnePage is exposed without proper authentication. Unauthorized users can supply a caller-supplied admin_user_id, allowing them to access document pages across different tenants. The vulnerability mainly arises due to insufficient access controls, allowing unauthorized read access to sensitive information intended for specific tenant visibility only.
Technical details of this vulnerability indicate that it is linked to ChatWiki's rendering of the /manage/getLibRawFileOnePage endpoint. The issue emerges because it wrongly trusts the admin_user_id parameter supplied by the caller. When an invalid file ID is correctly supplied by an attacker, the application does not adequately validate the access privileges of the user making the request. This could allow unauthorized document-page access that should have been restricted to verified tenant users only.
If exploited by malicious entities, this vulnerability could lead to unauthorized exposure of sensitive knowledge-base PDF documents. Attackers can leverage this to access and potentially misuse information intended to remain private between tenants of a particular organization. Data leakage could result in loss of confidentiality and potential reputational damage, especially if sensitive enterprise information is disclosed publicly or to competitors.
REFERENCES
- Upgrade ChatWiki to version 2.10.0 or later to address the vulnerability.
- Implement strict authentication and authorization checks before allowing requests to sensitive endpoints.
- Ensure validation is in place for user-provided parameters to prevent unauthorized access.
- Regularly audit access control configurations for all tenant-related document handling features.
- Provide training to developers on secure coding practices to prevent similar vulnerabilities.
Get AI-powered remediation steps tailored to your asset.
Try AI Solutions →