Pro Macros Remote Code Execution via Viewpdf and similar macros
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 1.1%
exploitation probability
1.1%top 38% of all CVEs
observed exploitation
nono source reports it
Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` page or edit or comment right on any page to perform remote code execution. Other macros like Viewppt are vulnerable to the same kind of attack. This vulnerability is fixed in 1.10.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
xwikisas · xwiki-pro-macrosReferences
https://github.com/xwikisas/xwiki-pro-macros/blob/main/xwiki-pro-macros-ui/src/main/resources/Confluence/Macros/Viewpdf.xml#L265-L267https://github.com/xwikisas/xwiki-pro-macros/commit/199553c84901999481a20614f093af2d57970ebahttps://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-cfq3-q227-7j65