« Volver al listado

CVE-2025-31487

Estado: AplazadaAlta (7.7)—

The XWiki JIRA extension provides various integration points between XWiki and JIRA (macros, UI, CKEditor plugin). If the JIRA macro is installed, any logged in XWiki user could edit his/her user profile wiki page and use that JIRA macro, specifying a fake JIRA URL that returns an XML specifying a DOCTYPE pointing to a local file on the XWiki server host and displaying that file's content in one of the returned JIRA fields (such as the summary or description for example). The vulnerability has been patched in the JIRA Extension v8.6.5.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

CWE-611 (XXE) en macro JIRA accesible a usuarios autenticados remotos; permite lectura de archivos locales mediante DTD malicioso. AV:N, PR:L, acceso a servicios internos de XWiki requiere interacción remota con privilegios.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability ScanningThreat Intelligence ProgramPrivileged Account ManagementNetwork SegmentationDisable or Remove Feature or ProgramApplication Isolation and Sandboxing

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Xwiki — Jira ExtensionAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-31487",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-31487",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-03T20:37:49.552563Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.7,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4,
        "exploitabilityScore": 3.1
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "xwiki-contrib",
          "product": "jira",
          "versions": [
            {
              "status": "affected",
              "version": ">= 4.2, < 8.5.6"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-04-03T19:15:40.047",
  "references": [
    {
      "url": "https://github.com/xwiki-contrib/jira/commit/5049e352d16f8356734de70daf1202301f170ee6",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/xwiki-contrib/jira/commit/98a74c2a516b42689c73b13ecd94e9c1998fa9cb",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/xwiki-contrib/jira/security/advisories/GHSA-wc53-4255-gw3f",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://jira.xwiki.org/browse/JIRA-49",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The XWiki JIRA extension provides various integration points between XWiki and JIRA (macros, UI, CKEditor plugin). If the JIRA macro is installed, any logged in XWiki user could edit his/her user profile wiki page and use that JIRA macro, specifying a fake JIRA URL that returns an XML specifying a DOCTYPE pointing to a local file on the XWiki server host and displaying that file's content in one of the returned JIRA fields (such as the summary or description for example). The vulnerability has been patched in the JIRA Extension v8.6.5."
    },
    {
      "lang": "es",
      "value": "La extensión JIRA de XWiki proporciona varios puntos de integración entre XWiki y JIRA (macros, interfaz de usuario, complemento CKEditor). Si la macro de JIRA está instalada, cualquier usuario de XWiki que haya iniciado sesión podría editar la página wiki de su perfil y usarla, especificando una URL falsa de JIRA que devuelve un XML con un DOCTYPE que apunta a un archivo local en el servidor de XWiki y muestra el contenido de dicho archivo en uno de los campos de JIRA devueltos (como el resumen o la descripción, por ejemplo). Esta vulnerabilidad se ha corregido en la extensión JIRA v8.6.5."
    }
  ],
  "lastModified": "2026-06-17T09:10:29.270",
  "sourceIdentifier": "security-advisories@github.com"
}