Security Advisory

CVE-2025-49580

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-13 15:45:58

Last updated 2025-06-13 18:09:04

Assigner GitHub_M

State PUBLISHED

Description

XWiki is a generic wiki platform. From 8.2 and 7.4.5 until 17.1.0-rc-1, 16.10.4, and 16.4.7, pages can gain script or programming rights when they contain a link and the target of the link is renamed or moved. This might lead to execution of scripts contained in xobjects that should have never been executed. This vulnerability is fixed in 17.1.0-rc-1, 16.10.4, and 16.4.7.

← Browse all CVEs View on cve.org ↗