Description
XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| xwikisas | application-confluence-migrator-pro | < 1.11.7 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.xwiki.confluencepro:application-confluence-migrator-pro-ui | < 1.11.7 | 1.11.7 | GHSA-3w9f-2pph-j5vc |