Beveiligingsadvies

CVE-2025-55749

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-01 20:09:46

Laatst bijgewerkt 2025-12-01 20:34:50

Toegewezen door GitHub_M

CVSS-score 8.7

Status PUBLISHED

Beschrijving

XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package (XJetty), a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials. Fixed in 16.10.11, 17.4.4, and 17.7.0.

← Alle CVE's bekijken Bekijk op cve.org ↗