CVE-2022-23618CWE-601

Open Redirect in xwiki-platform

Medium · published February 9, 2022

CVSS v3.1
4.7
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is no protection against URL redirection to untrusted sites, in particular some well known parameters (xredirect) can be used to perform url redirections. This problem has been patched in XWiki 12.10.7 and XWiki 13.3RC1. Users are advised to update. There are no known workarounds for this issue.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00800 · 56.1th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-02-09T21:05Z
EPSS history
Timeline
  • 09 FEB 21:05Z
    Open Redirect in xwiki-platform
    cvelistv5