What is the severity of CVE-2022-29258?

The severity of CVE-2022-29258 is classified as moderate.

How do I fix CVE-2022-29258?

To fix CVE-2022-29258, update XWiki to version 12.10.11 or later, or 13.10.3 or later.

Which versions are affected by CVE-2022-29258?

CVE-2022-29258 affects XWiki versions between 5.4.4 and 12.10.10, as well as versions between 13.0 and 13.4.7, and versions between 13.5 and 13.10.2.

What type of vulnerability is CVE-2022-29258?

CVE-2022-29258 is a filter-related vulnerability in the XWiki Platform.

Is CVE-2022-29258 exploitable remotely?

Yes, CVE-2022-29258 can be exploited remotely, making it critical to address in affected systems.

Vulnerability/
CVE-2022-29258

high

7.4

CWE

79 116 80

31/5/2022

3/8/2024

CVE-2022-29258: Cross-site Scripting in Filter Stream Converter Application in XWiki Platform

First published: Tue May 31 2022(Updated: )

XWiki Platform Filter UI provides a generic user interface to convert from a XWiki Filter input stream to an output stream with settings for each stream. Starting with versions 6.0-milestone-2 and 5.4.4 and prior to versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3, XWiki Platform Filter UI contains a possible cross-site scripting vector in the `Filter.FilterStreamDescriptorForm` wiki page related to pretty much all the form fields printed in the home page of the application. The issue is patched in versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3. The easiest workaround is to edit the wiki page `Filter.FilterStreamDescriptorForm` (with wiki editor) according to the instructions in the GitHub Security Advisory.

Credit: security-advisories@github.com

Affected Software	Affected Version	How to fix
Xwiki	>=5.4.4<12.10.11
Xwiki	>=13.0<13.4.7
Xwiki	>=13.5<13.10.3

Remedy

https://github.com/xwiki/xwiki-platform/commit/21906acb5ee2304552f56f9bbdbf8e7d368f7f3a

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2022-29258?
The severity of CVE-2022-29258 is classified as moderate.
How do I fix CVE-2022-29258?
To fix CVE-2022-29258, update XWiki to version 12.10.11 or later, or 13.10.3 or later.
Which versions are affected by CVE-2022-29258?
CVE-2022-29258 affects XWiki versions between 5.4.4 and 12.10.10, as well as versions between 13.0 and 13.4.7, and versions between 13.5 and 13.10.2.
What type of vulnerability is CVE-2022-29258?
CVE-2022-29258 is a filter-related vulnerability in the XWiki Platform.
Is CVE-2022-29258 exploitable remotely?
Yes, CVE-2022-29258 can be exploited remotely, making it critical to address in affected systems.

agent/type
collector/mitre-cve
source/MITRE
agent/weakness
agent/last-modified-date
agent/remedy
agent/title
agent/severity
agent/references
agent/author
agent/first-publish-date
agent/description
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
agent/softwarecombine
vendor/xwiki
canonical/xwiki
version/xwiki/5.4.4
version/xwiki/13.0
version/xwiki/13.5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.