CVE-2023-50719
XWiki Platform Solr search discloses password hashes of all users
- Published
- Updated
- Reserved
- Assigned by
- GitHub_M
Description
XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. By default, all user profiles are public. This vulnerability also affects any configurations used by extensions that contain passwords like API keys that are viewable for the attacker. Normally, such passwords aren't accessible but this vulnerability would disclose them as plain text. This has been patched in XWiki 14.10.15, 15.5.2 and 15.7RC1. There are no known workarounds for this vulnerability.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| GitHub_MCNA (assigner) | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVDNVD · Modified | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
- EPSS (exploitation in 30 days)
- 83.5% · top 0.3% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
- CWE-359: Exposure of Private Personal Information to an Unauthorized Actor (opens in a new tab)All about CWE-359 and its CVEs
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor (opens in a new tab)All about CWE-200 and its CVEs
- CWE-312 (opens in a new tab)All about CWE-312 and its CVEs
Affected products
- affected >= 7.2-milestone-2, < 14.10.15
- affected >= 15.0-rc-1, < 15.5.2
- affected >= 15.6-rc-1, < 15.7-rc-1
Affected packages
From reviewed advisories of the GitHub Advisory Database.
- Mavenorg.xwiki.platform:xwiki-platform-search-solr-apiGHSA-p6cp-6r35-32mh (opens in a new tab)
References (3)
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p6cp-6r35-32mh (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://github.com/xwiki/xwiki-platform/commit/3e5272f2ef0dff06a8f4db10afd1949b2f9e6eea (opens in a new tab)x_refsource_MISCx_transferred
- https://jira.xwiki.org/browse/XWIKI-21208 (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisory GHSA-p6cp-6r35-32mh (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-50719)Record last updated .