CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NCVE-2023-29513
Medium (4.3) in xwiki xwiki. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in org.xwiki.platform:xwiki-platform-web-templates 14.10.1.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has view right on any document. It's possible to create a new user using the `distribution/firstadminuser.wiki` in the wrong context. This vulnerability has been patched in XWiki 15.0-rc-1 and 14.10.1. There is no known workaround other than upgrading.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
- CWE
- CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- xwiki:xwiki
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-fp36-mjw5-fmgx | Maven | org.xwiki.platform:xwiki-platform-web-templates | >=8.0-rc-1 <14.10.1 | 14.10.1 |