Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-sr4u-a9ek-u3g9
Summary
XWiki Platform: Privilege escalation (PR) from user registration through PDFClass
### Impact
Remote code execution is possible via PDF export templates.
To reproduce on an installation, register a new user account with username `PDFClass` if `XWiki.PDFClass` does not exist.
On `XWiki.PDFClass`, use the class editor to add a "style" property of type "TextArea" and content type "Plain Text".
Then, add an object of class `PDFClass` and set the "style" attribute to `$services.logging.getLogger('PDFClass').error("I got programming: $services.security.authorization.hasAccess('programming')")`.
Finally, go to `<host>/xwiki/bin/export/Main/WebHome?format=pdf&pdftemplate=XWiki.PDFClass`. If the logs contain "ERROR PDFClass - I got programming: true", the instance is vulnerable.

### Patches
This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10-rc-1.

### Workarounds
If PDF templates are not typically used on the instance, an administrator can create the document `XWiki.PDFClass` and block its edition, after making sure that it does not contain a `style` attribute.
Otherwise, the instance needs to be updated.

### References
- https://jira.xwiki.org/browse/XWIKI-21337
- https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9
Aliases
0
alias CVE-2024-31981
1
alias GHSA-vxwr-wpjv-qjq7
Fixed_packages
0
url pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@14.10.20
purl pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@14.10.20
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@14.10.20
1
url pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.5.4
purl pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.5.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.5.4
2
url pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.10-rc-1
purl pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.10-rc-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.10-rc-1
Affected_packages
0
url pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@3.0.1
purl pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sr4u-a9ek-u3g9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@3.0.1
1
url pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.0-rc-1
purl pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.0-rc-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ksc-nvrc-6ub3
1
vulnerability VCID-64wz-61e9-97h4
2
vulnerability VCID-6keh-puhm-6kc7
3
vulnerability VCID-gtbq-9wht-6qg2
4
vulnerability VCID-jwfk-c9aq-5qbz
5
vulnerability VCID-q2b9-583a-9yd9
6
vulnerability VCID-sr4u-a9ek-u3g9
7
vulnerability VCID-tue2-pwje-qqfz
8
vulnerability VCID-zv2f-hpz1-ruba
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.0-rc-1
2
url pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.6-rc-1
purl pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.6-rc-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4mj5-repk-zyg2
1
vulnerability VCID-gtbq-9wht-6qg2
2
vulnerability VCID-jwfk-c9aq-5qbz
3
vulnerability VCID-q2b9-583a-9yd9
4
vulnerability VCID-sr4u-a9ek-u3g9
5
vulnerability VCID-zv2f-hpz1-ruba
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-oldcore@15.6-rc-1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-31981
reference_id
reference_type
scores
0
value 0.24138
scoring_system epss
scoring_elements 0.96044
published_at 2026-04-02T12:55:00Z
1
value 0.24138
scoring_system epss
scoring_elements 0.9609
published_at 2026-04-24T12:55:00Z
2
value 0.24138
scoring_system epss
scoring_elements 0.96089
published_at 2026-04-21T12:55:00Z
3
value 0.24138
scoring_system epss
scoring_elements 0.96088
published_at 2026-04-18T12:55:00Z
4
value 0.24138
scoring_system epss
scoring_elements 0.96082
published_at 2026-04-16T12:55:00Z
5
value 0.24138
scoring_system epss
scoring_elements 0.96072
published_at 2026-04-13T12:55:00Z
6
value 0.24138
scoring_system epss
scoring_elements 0.9607
published_at 2026-04-12T12:55:00Z
7
value 0.24138
scoring_system epss
scoring_elements 0.96067
published_at 2026-04-09T12:55:00Z
8
value 0.24138
scoring_system epss
scoring_elements 0.96065
published_at 2026-04-08T12:55:00Z
9
value 0.24138
scoring_system epss
scoring_elements 0.96055
published_at 2026-04-07T12:55:00Z
10
value 0.24138
scoring_system epss
scoring_elements 0.9605
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-31981
1
reference_url https://github.com/xwiki/xwiki-platform
reference_id
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/xwiki/xwiki-platform
2
reference_url https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3
reference_id
reference_type
scores
0
value 10
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-26T17:31:37Z/
url https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3
3
reference_url https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73
reference_id
reference_type
scores
0
value 10
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-26T17:31:37Z/
url https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73
4
reference_url https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9
reference_id
reference_type
scores
0
value 10
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-26T17:31:37Z/
url https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9
5
reference_url https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vxwr-wpjv-qjq7
reference_id
reference_type
scores
0
value 10
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
2
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
3
value CRITICAL
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-26T17:31:37Z/
url https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vxwr-wpjv-qjq7
6
reference_url https://jira.xwiki.org/browse/XWIKI-21337
reference_id
reference_type
scores
0
value 10
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-26T17:31:37Z/
url https://jira.xwiki.org/browse/XWIKI-21337
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-31981
reference_id
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-31981
8
reference_url https://github.com/advisories/GHSA-vxwr-wpjv-qjq7
reference_id GHSA-vxwr-wpjv-qjq7
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vxwr-wpjv-qjq7
Weaknesses
0
cwe_id 862
name Missing Authorization
description The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-sr4u-a9ek-u3g9