Medium WID-SEC-2025-0848 1 CVE

xwiki: Schwachstelle ermöglicht Offenlegung von Informationen

Published Apr 16, 2025 · Updated Apr 16, 2025 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in xwiki ausnutzen, um Informationen offenzulegen.

Product

XWiki ist eine Open-Source-Wiki-Software-Plattform, für die Erstellung und Verwaltung von Wikis und Knowledge-Management-Systemen

Vulnerabilities 1

Medium 4.7

CVE-2025-32783

XWiki allows unregistered users to see "public" messages from a closed wiki via notifications from a different wiki

XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Stream enabled and a wiki configured as closed from selecting "Prevent unregistered users to view pages" in the Administrations Rights. The vu…

xwiki xwiki-platform org.xwiki.platform:xwiki-platform-messagestream Maven

Apr 16, 2025

Revision history

2025-04-16 #1
Initiale Fassung

References

GitHub Advisory Database vom 2025-04-16
https://github.com/advisories/GHSA-42fh-pvvh-999x
xwiki GitHub vom 2025-04-16
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-42fh-pvvh-999x