CVE-2026-48048

🎯 CVE-2026-48048 🧪 PoC 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-48048 | XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the `LiveTableResults`, it is still possible to discover password hashes one bit at a time, so with 768 requests, the full password salt and hash can be retrieved of a user. The check for password (and email propertie

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the `LiveTableResults`, it is still possible to discover password hashes one bit at a time, so with 768 requests, the full password salt and hash can be retrieved of a user. The check for password (and email properties) has been adjusted in XWiki 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17. As a workaround, the patch can be applied manually to the wiki page `XWiki.LiveTableResultsMacros`.

Klassifikation & Betroffenheit:

CWE-359 xwiki xwiki-platform 17.5.0-rc-1, < 17.10.3xwiki-platform 6.2.1, < 16.10.17xwiki-platform 17.0.0-rc-1, < 17.4.9

Exposure of Private Personal Information to an Unauthorized Actor

The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

🛡️ Empfohlene Mitigation: Identify and consult all relevant regulations for personal privacy. An organization may be required to comply with certain federal and state regulations, depending on its location, the type of business it conducts, and the nature of any private data it handles. Regulations may include Safe Harbor Privacy Framework [REF…

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-464 · Evercookie (Medium) CAPEC-467 · Cross Site Identification (Low) CAPEC-498 · Probe iOS Screenshots CAPEC-508 · Shoulder Surfing (High)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1606.001 · Forge Web Credentials: Web Cookies

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2023-29508 8.9 CVE-2023-29207 8.9 CVE-2023-26480 8.9 CVE-2022-36098 8.9 CVE-2022-36097 8.9

🩹 Patch verfügbar (OSV):

🩹 65a53ce90d27245391dec10056b066e7eb3ace7d (Commit) 🩹 a0c973343dbb009ef54643526df993676b0924e3 (Commit)

🇩🇪 BSI-Sicherheitshinweise: BSI · mittel · xwiki: Mehrere Schwachstellen ↗

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 08/2026

Heute 30.10.

CVSS-Vektor-Analyse: 7.5

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Hoch

I · Integrität Keine

A · Verfügbarkeit Keine

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CNA-Bewertung (GitHub_M): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Veröffentlicht:10.08.2026

Aktualisiert:10.08.2026 21:11

Assigner (CNA):GitHub_M

EUVD-ID:EUVD-2026-55658

CWE-359 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	CVEs	Anteil
≥90 %	743	0,2 %
≥50 %	3.224	0,8 %
≥10 %	22.068	5,8 %
<10 %	354.694	93,2 %

7.5 HIGH

EPSS

0.7%

CVE-2026-48048 🌐 Netzwerk (Remote) 🔓 Keine Authentifizierung nötig

xwiki

CVE-2026-48048 | XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the `LiveTableResults`, it is still possible to discover password hashes one bit at a time, so with 768 requests, the full password salt and hash can be retrieved of a user. The check for password (and email propertie

CWE-359 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

vor 2 Monaten ↻ vor 2 Monaten

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub