CVE-2022-23617

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.

• CWE-862

• https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5Patch, Third Party Advisory
• https://github.com/xwiki/xwiki-platform/commit/b35ef0edd4f2ff2c974cbeef6b80fcf9b5a44554Patch, Third Party Advisory
• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gf7x-2j2x-7f73Third Party Advisory
• https://jira.xwiki.org/browse/XWIKI-18430Patch, Vendor Advisory
• https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5Patch, Third Party Advisory
• https://github.com/xwiki/xwiki-platform/commit/b35ef0edd4f2ff2c974cbeef6b80fcf9b5a44554Patch, Third Party Advisory
• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gf7x-2j2x-7f73Third Party Advisory
• https://jira.xwiki.org/browse/XWIKI-18430Patch, Vendor Advisory

Published

Feb 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23611iTunesRPC-Remastered is a Discord Rich Presence for iTunes o…9.8
• CVE-2022-23612OpenMRS is a patient-based medical record system focusing on…7.5
• CVE-2022-23613xrdp is an open source remote desktop protocol (RDP) server.…7.8
• CVE-2022-23614Twig is an open source template language for PHP. When in a …9.8
• CVE-2022-23615XWiki Platform is a generic wiki platform offering runtime s…5.4
• CVE-2022-23616XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2022-23618XWiki Platform is a generic wiki platform offering runtime s…6.1
• CVE-2022-23619XWiki Platform is a generic wiki platform offering runtime s…7.5
• CVE-2022-2362The Download Manager WordPress plugin before 3.2.50 prioriti…7.5
• CVE-2022-23620XWiki Platform is a generic wiki platform offering runtime s…5.4
• CVE-2022-23621XWiki Platform is a generic wiki platform offering runtime s…4.9
• CVE-2022-23622XWiki Platform is a generic wiki platform offering runtime s…6.1