{"id":"CVE-2023-29204","published":"2023-04-15T15:24:22Z","modified":"2025-02-06T17:06:49Z","title":"URL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcore","vendor":"xwiki","product":"xwiki-platform","tier":"tail","description":{"text":"XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as `//mydomain.com` (i.e. omitting the `http:`). It was also possible to bypass it when using URL such as `http:/mydomain.com`. The problem has been patched on XWiki 13.10.10, 14.4.4 and 14.8RC1.\n","provenance":"source","from":"CVE.org"},"cvss":{"score":4.7,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01756,"percentile":0.77946,"provenance":"source"},"cwes":[{"id":"CWE-601","name":"URL Redirection to Untrusted Site"}],"references":[{"url":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xwph-x6xj-wggv","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/xwiki/xwiki-platform/commit/e4f7f68e93cb08c25632c126356d218abf192d1e#diff-c445f288d5d63424f56ef13f65514ab4e174a72e979b53b88197c2b7def267cf","tags":["x_refsource_MISC"]},{"url":"https://jira.xwiki.org/browse/XWIKI-10309","tags":["x_refsource_MISC"]},{"url":"https://jira.xwiki.org/browse/XWIKI-19994","tags":["x_refsource_MISC"]}],"priority":{"score":23.9,"factors":[{"name":"EPSS percentile","points":15.59},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":3.29}]},"exploitSources":{"nuclei":[{"id":"CVE-2023-29204","name":"XWiki - Open Redirect","severity":"medium","path":"http/cves/2023/CVE-2023-29204.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29204.yaml"}],"provenance":"source"},"vendorSlug":"xwiki","affectedVersions":[{"vendor":"xwiki","product":"xwiki-platform","versions":[">= 6.0-rc-1, < 13.10.10",">= 14.0-rc-1, < 14.4.4",">= 14.5, < 14.8-rc-1"]}],"affected":[{"ecosystem":"Maven","package":"org.xwiki.platform:xwiki-platform-oldcore","vulnerableRanges":[">=6.0-rc-1, <13.10.10",">=14.0-rc-1, <14.4.4",">=14.5, <14.8-rc-1"],"patched":["13.10.10","14.4.4","14.8-rc-1"],"from":["GHSA-xwph-x6xj-wggv"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-1434","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-xwiki-platform-cve-2022-23618","parents":[{"from":"CVE-2022-23618","to":"CVE-2023-29204","relation":"related","confidence":"high","kind":"lineage","evidence":[{"kind":"osv-related","provenance":"source","id":"GHSA-xwph-x6xj-wggv","via":"reference","url":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-jp55-vvmf-63mv"}]}],"packageHistory":[{"cve":"CVE-2022-36090","published":"2022-09-08","fixed":"14.3-rc-1","kev":false},{"cve":"CVE-2022-41929","published":"2022-11-23","fixed":"14.4.2","kev":false,"link":{"from":"CVE-2022-41929","to":"CVE-2023-29204","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.xwiki.platform:xwiki-platform-oldcore","fromFixed":"14.4.2","toFixed":"14.4.4","daysApart":143}]}},{"cve":"CVE-2022-41932","published":"2022-11-23","fixed":"14.6-rc-1","kev":false,"link":{"from":"CVE-2022-41932","to":"CVE-2023-29204","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.xwiki.platform:xwiki-platform-oldcore","fromFixed":"13.10.8","toFixed":"13.10.10","daysApart":143},{"kind":"version-step","provenance":"source","package":"Maven:org.xwiki.platform:xwiki-platform-oldcore","fromFixed":"14.6-rc-1","toFixed":"14.8-rc-1","daysApart":143}]}},{"cve":"CVE-2023-29204","published":"2023-04-15","fixed":"14.8-rc-1","kev":false},{"cve":"CVE-2023-26474","published":"2023-03-02","fixed":"14.10","kev":false},{"cve":"CVE-2023-29208","published":"2023-04-15","fixed":"14.10","kev":false,"link":{"from":"CVE-2023-29204","to":"CVE-2023-29208","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.xwiki.platform:xwiki-platform-oldcore","fromFixed":"14.4.4","toFixed":"14.4.7","daysApart":0}]}},{"cve":"CVE-2023-29507","published":"2023-04-16","fixed":"14.10","kev":false,"link":{"from":"CVE-2023-29204","to":"CVE-2023-29507","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.xwiki.platform:xwiki-platform-oldcore","fromFixed":"14.8-rc-1","toFixed":"14.10","daysApart":1}]}}],"package":"Maven:org.xwiki.platform:xwiki-platform-oldcore"}}