GHSA-9jq5-xwqw-q8j3
XWiki Platform vulnerable to page render failure due to broken translations
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.xwiki.platform:xwiki-platform-localization-source-wiki | >= 4.3-milestone-2, < 13.10.11 | 13.10.11 |
| Maven | org.xwiki.platform:xwiki-platform-localization-source-wiki | >= 14.0-rc-1, < 14.4.8 | 14.4.8 |
| Maven | org.xwiki.platform:xwiki-platform-localization-source-wiki | >= 14.5, < 14.10.1 | 14.10.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
It's possible to break many translations coming from wiki pages by creating a corrupted document containing a translation object.
### Patches
The vulnerability has been patched in XWiki 15.0-rc-1, 14.10.1, 14.4.8, and 13.10.11.
### Workarounds
There is no other workaround other than fixing any way to create a document that fail to load.
### References
https://jira.xwiki.org/browse/XWIKI-20460
### For more information
If you have any questions or comments about this advisory:
* Open an issue in [Jira XWiki.org](https://jira.xwiki.org/)
* Email us at [Security Mailing List](mailto:[email protected])
References
External links from the advisory. They lead to third-party sites.