High WID-SEC-2025-1967 2 CVEs

xwiki: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Sep 3, 2025 · Updated Sep 3, 2025 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in xwiki ausnutzen, um Informationen offenzulegen.

Product

XWiki ist eine Open-Source-Wiki-Software-Plattform, für die Erstellung und Verwaltung von Wikis und Knowledge-Management-Systemen

Vulnerabilities 2

Critical 9.3

CVE-2025-55747 Scanner template

XWiki Platform's configuration files can be accessed through the webjars API

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7.

xwiki xwiki-platform org.xwiki.platform:xwiki-platform-webjars-api org.xwiki.platform:xwiki-platform-webjars Maven

Sep 3, 2025
Critical 9.3

CVE-2025-55748 Scanner template

XWiki Platform's configuration files can be accessed through jsx and sx endpoints

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6, configuration files are accessible through jsx and sx endpoints. It's possible to access and read configurati…

xwiki xwiki-platform org.xwiki.platform:xwiki-platform-skin-skinx Maven

Sep 3, 2025

Revision history

2025-09-03 #1
Initiale Fassung

References

GitHub Security Advisory GHSA-qww7-89xh-x7m7 vom 2025-09-03
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qww7-89xh-x7m7
GitHub Security Advisory GHSA-m63c-3rmg-r2cf vom 2025-09-03
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m63c-3rmg-r2cf