CVE-2024-45591

XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification (both username and displayed name) and the version comment. This information is exposed regardless of the rights setup, and even when the wiki is configured to be fully private. On a private wiki, this can be tested by accessing /xwiki/rest/wikis/xwiki/spaces/Main/pages/WebHome/history, if this shows the history of the main page then the installation is vulnerable. This has been patched in XWiki 15.10.9 and XWiki 16.3.0RC1.

• CWE-359
• CWE-862
• CWE-862

• https://github.com/xwiki/xwiki-platform/commit/26482ee5d29fc21f31134d1ee13db48716e89e0fPatch
• https://github.com/xwiki/xwiki-platform/commit/9cbca9808300797c67779bb9a665d85cf9e3d4b8Patch
• https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-pvmm-55r5-g3mmVendor Advisory
• https://jira.xwiki.org/browse/XWIKI-22052Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Sep 10, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45586This vulnerability exists due to improper access controls on…8.8
• CVE-2024-45587This vulnerability exists in Symphony XTS Web Trading platfo…8.8
• CVE-2024-45588This vulnerability exists in Symphony XTS Web Trading platfo…8.1
• CVE-2024-45589RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08…5.9
• CVE-2024-4559Heap buffer overflow in WebAudio in Google Chrome prior to 1…6.5
• CVE-2024-45590body-parser is Node.js body parsing middleware. body-parser …7.5
• CVE-2024-45592auditor-bundle, formerly known as DoctrineAuditBundle, integ…6.1
• CVE-2024-45593Nix is a package manager for Linux and other Unix systems. A…8.8
• CVE-2024-45594Decidim is a participatory democracy framework. The meeting …5.4
• CVE-2024-45595D-Tale is a visualizer for Pandas data structures. Users hos…9.8
• CVE-2024-45596Directus is a real-time API and App dashboard for managing S…6.5
• CVE-2024-45597Pluto is a superset of Lua 5.4 with a focus on general-purpo…5.3