S4E just found a high top 10 tcp port service scan
high·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2023-37462 Scanner

Detects 'Eval Injection' vulnerability in xwiki-platform (open source project) affects v. from 7.0-rc-1 to 14.4.8 and from >= 14.5 to 14.10.4.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
0
Times Used
by S4E users
0
Assets Scanned
domains & IPs
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2023-37462
10.0
CVSScritical
Exploitable remotely over the internet · low-privilege account sufficient.

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document `SkinsCode.XWikiSkinsSheet` leads to an injection vector from view right on that document to programming rights, or in other words, it is possible to execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The attack works by opening a non-existing page with a name crafted to contain a dangerous payload. It is possible to check if an existing installation is vulnerable. See the linked GHSA for instructions on testing an installation. This issue has been patched in XWiki 14.4.8, 14.10.4 and 15.0-rc-1. Users are advised to upgrade. The fix commit `d9c88ddc` can also be applied manually to the impacted document `SkinsCode.XWikiSkinsSheet` and users unable to upgrade are advised to manually patch their installations.

Attack Vector
Network
Privileges Req.
Low
User Interaction
None
Affected
xwiki-platformby xwiki
>= 7.0-rc-1, < 14.4.8
Updated Aug 19, 2026View on NVD →
Detail

XWiki Platform is a wiki software that provides runtime services for applications built on top of it. This platform serves as a generic wiki offering various extensions and customizable themes. XWiki provides a web-based platform that enables users to create articles, edit and collaborate on content, and share information with others. This software solution is used in a range of industries and sectors, including government agencies, educational institutions, and many businesses. XWiki Platform is designed to streamline document collaboration, knowledge management, and content authoring, allowing teams to work efficiently from anywhere with an internet connection.

Recently, a severe vulnerability was detected in XWiki Platform, CVE-2023-37462. The vulnerability relates to improper escaping in the document SkinsCode.XWikiSkinsSheet. It opens the doors for hackers to inject code from view directly onto that document, rendering unrestricted access to programming rights. This means that attackers could execute Groovy and Python macros that allow remote code execution. In effect, attackers have unrestricted read and write access to all the contents of the wiki. An attacker can exploit this vulnerability by crafting a non-existing page name containing a dangerous payload.

When exploited, this vulnerability can lead to the complete compromise of an organization's data. Attackers could remotely execute code using unrestricted privileges. This means they can modify any wiki entity, read any private data on the system, or delete any document. Additionally, they have access to programming rights, allowing them to manipulate or modify wiki themes, extensions, or plugins. With these capabilities, the attacker could access sensitive documents, steal critical corporate information, or use the wiki system as a staging ground for further attacks or exploitation.

In conclusion, security threats are real and affect any organization's digital assets at any time. The good news, however, is that the s4e.io platform offers pro features that allow readers to easily and quickly learn about vulnerabilities in their digital assets. In this way, organizations can implement proactive measures to mitigate such threats before they impact their operations.

 

REFERENCES

Solution Advice

To protect against this vulnerability, users of XWiki Platfrom are advised to take the following precautions: • Upgrade to the latest patched versions of XWiki 14.4.8, 14.10.4, or 15.0-rc-1 • Apply the patch commit d9c88ddc manually to the impacted document SkinsCode.XWikiSkinsSheet • Exercise caution when opening non-existing pages with names containing potentially dangerous payloads • Have an active security monitoring system in place to detect and prevent any suspicious activity • Train users on how to recognize and report security issues promptly.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.