How the Mentioned CVE Works:
The vulnerability in XWiki arises due to incorrect wiki reference handling in the AuthorizationManager. This flaw allows unauthorized users to bypass access controls when specific rights like “Prevent unregistered users to view pages” or “Prevent unregistered users to edit pages” are enabled on subwikis. The issue occurs because the REST API fails to validate the wiki context properly, enabling attackers to access private information without proper credentials. This vulnerability is exploitable by sending unauthenticated requests to the REST API, which improperly grants access to restricted pages. The flaw is limited to subwikis and specific right configurations, making it critical for environments relying on these access controls.
DailyCVE Form:
Platform: XWiki
Version: 6.1-rc-1 to 15.10.13, 16.0.0-rc-1 to 16.4.5, 16.5.0-rc-1 to 16.10.0-rc-1
Vulnerability: Authorization Bypass
Severity: Critical
Date: Mar 19, 2025
What Undercode Say:
Exploitation:
- Detection: Enable “Prevent unregistered users to view pages” on a subwiki.
- Exploit: Use the REST API to access restricted pages without credentials.
3. Example Request:
curl -X GET http://<xwiki-domain>/rest/wikis/<subwiki>/pages/<page-name>
4. Impact: Unauthorized access to private data.
Protection:
- Patch: Upgrade to XWiki 15.10.14, 16.4.6, or 16.10.0-rc-1.
- Mitigation: Disable REST API access for subwikis if not required.
- Configuration Check: Verify “Prevent unregistered users to view pages” settings.
Analytics:
1. Affected Systems: Subwikis with specific access controls.
- Risk Level: High due to potential data exposure.
- Exploit Complexity: Low, as it requires no authentication.
Commands:
1. Check Version:
xwiki-version
2. Disable REST API:
sudo systemctl stop xwiki-rest
3. Audit Logs:
grep "REST API" /var/log/xwiki/access.log
Code:
1. Patch Verification:
import requests
response = requests.get("http://<xwiki-domain>/rest/wikis/<subwiki>/pages/<page-name>")
if response.status_code == 200:
print("Vulnerable")
else:
print("Patched")
2. Access Control Check:
xwiki-config --check-access-controls
References:
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-XXXX
- GitHub Advisory: https://github.com/advisories/GHSA-XXXX-XXXX-XXXX
- XWiki Patches: https://www.xwiki.org/security
By following these steps, you can exploit, detect, and protect against this critical vulnerability in XWiki.
References:
Reported By: https://github.com/advisories/GHSA-gq32-758c-3wm3
Extra Source Hub:
Undercode
