Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-lesscss-script

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.7
    CVE-2025-32972

    The lesscss script service allows cache clearing without programming right

    XWiki is a generic wiki platform. In versions starting from 6.1-milestone-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the script API of the LESS compiler in XWiki is incorrectly checking for rights when…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-lesscss-script Maven