CVE-2025-32429

Published Jul 24, 2025

Last updated 21 days ago

XWiki

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-32429 is a SQL injection vulnerability found in XWiki Platform, a generic wiki platform. The vulnerability affects versions 9.4-rc-1 through 16.10.5, and 17.0.0-rc-1 through 17.2.2. The vulnerability allows anyone to inject SQL code using the `sort` parameter of the `getdeleteddocuments.vm`. The injected code is used as an `ORDER BY` value without sanitization. To address this vulnerability, XWiki has released patched versions 16.10.6 and 17.3.0-rc-1. There are no known workarounds besides upgrading XWiki.

Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. This is fixed in versions 16.10.6 and 17.3.0-rc-1.
Source: security-advisories@github.com
NVD status: Analyzed
Products: xwiki

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.3
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

security-advisories@github.com: CWE-89

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D5EC45F9-9CC2-46A8-835F-C0C03E22FEF2",
            "versionEndExcluding": "16.10.6",
            "versionStartIncluding": "9.4"
          },
          {
            "criteria": "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AAB2B86E-1053-4B68-8553-B73C003453E9",
            "versionEndIncluding": "17.2.2",
            "versionStartIncluding": "17.0.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.