Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

xwiki/xwiki-platform

              master @ d9f9ebc
            

451

Fixes

100

CVEs

CRITICAL

Peak severity

21.1%

Coverage

Highlights

Auth Bypass: 170 prior fixes. Scrutinize any change in this area.

xwiki-platform-oldcore: most-fixed (48 issues). Treat as high-risk during review.

221 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The platform's core template evaluation and document rendering pipeline historically suffers from authorization and programming rights tracking failures. If the context security document (`sdoc`) state is not correctly established and isolated during switching, untrusted scripts run with elevated script or programming privileges, leading directly to sandbox bypasses and system compromise.

SQL Injection: Untrusted users without programming rights can execute arbitrary SQL/HQL commands if the execution engine fails to validate and sanitize ORDER BY clauses, or relies on insecure query string concatenation instead of strict parameter binding.

Auth Bypass: Real-time collaborative editing sessions allow users with edit-only rights to inject and execute privileged macro scripts if the websocket channels do not dynamically compute and validate the correct effective author and context script level.