org.xwiki.platform:xwiki-platform-webjars-api

2 results · Feed

• Medium 5.9
  CVE-2026-48047

  XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin

  XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, a potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar ex…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-webjars-api Maven
  Aug 7, 2026
• Critical 9.3
  CVE-2025-55747 Scanner template

  XWiki Platform's configuration files can be accessed through the webjars API

  XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7.

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-webjars-api org.xwiki.platform:xwiki-platform-webjars Maven
  Sep 3, 2025