Summary
Ein Angreifer kann mehrere Schwachstellen in xwiki ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen offenzulegen.
Product
XWiki ist eine Open-Source-Wiki-Software-Plattform, für die Erstellung und Verwaltung von Wikis und Knowledge-Management-Systemen
Vulnerabilities 3
-
High 8.7CVE-2025-54125 Scanner template
XWiki Platform: Password and email exposure in xml.vm fields
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XM…
-
High 7.1
XWiki Platform: Any user with editing rights can access password properties through Database List Properties
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 9.8-rc-1 through 16.4.6, 16.5.0-rc-1 through 16.10.4, and 17.0.0-rc-1 through 17.1.0, …
-
Medium 6.5CVE-2025-32430 Scanner template
XWiki Platform contains Reflected XSS vulnerability in two templates
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, 16.5.0-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, two templates contain reflected XSS vulnerabilitie…
Revision history
-
#1
Initiale Fassung
References
-
xwiki GitHub vom 2025-08-05
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r38m-cgpg-qj69
-
xwiki GitHub vom 2025-08-05
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-57q2-6cp4-9mq3
-
xwiki GitHub vom 2025-08-05
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m9x4-w7p9-mxhx