CVE-2023-26470CWE-400

In XWiki Platform, saving a document with a large object number leads to persistent OOM errors

Medium · published March 2, 2023

CVSS v3.1
5.7
EPSS
1%
Percentile
57.9
In the wild
Unconfirmed
What it is

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make the farm unusable by adding an object to a page with a huge number (e.g. 67108863). Most of the time this will fill the memory allocated to XWiki and make it unusable every time this document is manipulated. This issue has been patched in XWiki 14.0-rc-1.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00855 · 57.9th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-03-02T18:37Z
EPSS history
Timeline
  • 02 MAR 18:37Z
    In XWiki Platform, saving a document with a large object number leads to persistent OOM errors
    cvelistv5