CVE-2023-29513

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has view right on any document. It's possible to create a new user using the `distribution/firstadminuser.wiki` in the wrong context. This vulnerability has been patched in XWiki 15.0-rc-1 and 14.10.1. There is no known workaround other than upgrading.

• CWE-284

• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-fp36-mjw5-fmgxExploit, Vendor Advisory
• https://jira.xwiki.org/browse/XWIKI-19852Exploit, Issue Tracking, Vendor Advisory
• https://jira.xwiki.org/browse/XWIKI-20400Exploit, Issue Tracking, Vendor Advisory
• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-fp36-mjw5-fmgxExploit, Vendor Advisory
• https://jira.xwiki.org/browse/XWIKI-19852Exploit, Issue Tracking, Vendor Advisory
• https://jira.xwiki.org/browse/XWIKI-20400Exploit, Issue Tracking, Vendor Advisory

Published

Apr 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29508XWiki Commons are technical libraries common to several othe…5.4
• CVE-2023-29509XWiki Commons are technical libraries common to several othe…8.8
• CVE-2023-2951A vulnerability classified as critical has been found in cod…9.1
• CVE-2023-29510XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-29511XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-29512XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-29514XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-29515XWiki Platform is a generic wiki platform offering runtime s…5.4
• CVE-2023-29516XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-29517XWiki Platform is a generic wiki platform offering runtime s…7.5
• CVE-2023-29518XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-29519XWiki Platform is a generic wiki platform offering runtime s…8.8