Skip to content
OpenAdvisories
Medium WID-SEC-2025-1122 1 CVE

xwiki: Schwachstelle ermöglicht Privilegieneskalation

Published May 21, 2025 · Updated May 21, 2025 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in xwiki ausnutzen, um seine Privilegien zu erhöhen.

Product

XWiki ist eine Open-Source-Wiki-Software-Plattform, für die Erstellung und Verwaltung von Wikis und Knowledge-Management-Systemen

Vulnerabilities 1

  • Medium 4.8
    CVE-2025-48063

    XWiki Platform Security Authorization Bridge allows users with just edit right can enforce required rights with programming right

    XWiki is a generic wiki platform. In XWiki 16.10.0, required rights were introduced as a way to limit which rights a document can have. Part of the security model of required rights is that a user who doesn't have a right also cannot define that right as requ…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-security-authorization-bridge Maven

Revision history

  1. #1

    Initiale Fassung

References