CVE-2022-41932: xwiki — Katalog CVE

csirt@kutim:~/threat-intel/cve/CVE-2022-41932

CVSS 5.3 · Medium EPSS 0,55%

Kerentanan Uncontrolled Resource Consumption pada xwiki. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make XWiki create many new schemas and fill them with tables just by using a crafted user identifier in the login form. This may lead to degraded database performance. The problem has been patched in XWiki 13.10.8, 14.6RC1 and 14.4.2. Users are advised to upgrade. There are no known workarounds for this issue.

Rincian

Terbit di NVD: 23 November 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-400: Uncontrolled Resource Consumption
CWE-770: Allocation of Resources Without Limits or Throttling
EPSS (30 hari): 0,55% peluang dieksploitasi; lebih tinggi dari 44,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
xwiki	xwiki	Semua versi sebelum 13.10.8
xwiki	xwiki	Versi 14.0.0 hingga sebelum 14.4.2
xwiki	xwiki	Versi 14.5.0 hingga sebelum 14.6
xwiki	xwiki	Versi 14.4.3
xwiki	xwiki	Versi 14.4.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://jira.xwiki.org/browse/XWIKI-19886 issue tracking · patch · advisory vendor
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4x5r-6v26-7j4v advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.