Skip to content
OpenAdvisories

Product · xwikisas

application-urlshortener

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.7
    CVE-2025-48885

    application-urlshortener users can create arbitrary pages as long as they have view access to them

    application-urlshortener create shortened URLs for XWiki pages. Versions prior to 1.2.4 are vulnerable to users with view access being able to create arbitrary pages. Any user (even guests) can create these docs, even if they don't exist already. This can ena…

    xwikisas application-urlshortener