Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-19514

XSS using a JSX object

    XMLWordPrintable

Details

    • High
    • Unknown
    • N/A
    • N/A

    Description

      It's possible to perform a XSS in JSX "on demand" or "on this document" which don't requires PR, just by creating a new JSX with edit right, and waiting for a PR user to execute it when accessing the page.
      By doing so, we can request a PR user to create a page, or modify it, using any REST (or HTTP) request on the targeted wiki.
      Basically it allows privilege escalation.

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-9119 JavaScriptExtension enables any user with edit right to execute any script he wants

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. XRENDERING-663 XSS Javascript injection via XWiki 2.x syntax

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-9118 XSS in restricted context via html macro

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-18049 Improve the html escaping mechanism for XSS protection

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-19421 JSX XObjects with Use this extension=On this wiki requires PR rights

          • Major - Major loss of function.
          • Closed

          Activity

            People

              surli Simon Urli
              surli Simon Urli
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: