XWiki Platform Live Data Table Connector Privilege Escalation Vulnerability
- Severity
- HIGH
- Affected component
- xwiki (other)
- Patched version
- 16.10.17, 17.4.10, 17.10.4, 18.1.0
An early warning has been issued for a vulnerability in the XWiki Platform Live Data Table Connector. This vulnerability allows users with edit rights to escalate their privileges to script rights through Live Data editing.
What happened
The XWiki Platform Live Data Table Connector reportedly allows users with edit rights to escalate their privileges to script rights through Live Data editing. This enables the execution of dangerous scripts and the sending of unfiltered HTML and JavaScript. The vulnerability has been patched in versions 16.10.17, 17.4.10, 17.10.4, and 18.1.0. Users should assess their exposure by checking if they are running an affected version of the XWiki Platform.
This vulnerability, tracked as GHSA-45PH-GXXR-GWGW, has a high severity rating. It is under investigation and has not yet been exploited in the wild. Users are advised to upgrade to one of the patched versions to mitigate the risk.
What to do about it
- Upgrade to one of the patched versions: 16.10.17, 17.4.10, 17.10.4, or 18.1.0.
- Check your current version of the XWiki Platform to determine if you are running an affected version.
- Monitor the primary sources for updates on the vulnerability and any additional patches that may be released.
- Implement additional security measures to protect against potential exploitation, such as restricting access to Live Data editing features.
How 0Day would have caught this
xwiki is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You are affected if you are running a version of the XWiki Platform that has not been patched. Check if your version is one of the patched versions: 16.10.17, 17.4.10, 17.10.4, or 18.1.0.
What should I do right now?
Upgrade to one of the patched versions: 16.10.17, 17.4.10, 17.10.4, or 18.1.0. Monitor the primary sources for updates on the vulnerability and any additional patches that may be released.
Is this vulnerability being exploited in the wild?
No, this vulnerability has not yet been exploited in the wild. It is under investigation.