Threats tagged 'ghsa-qww7-89xh-x7m7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2025-55747Org.xwiki.platform:xwiki platform webjars api: XWiki configuration files can be accessed through the webjars API Critical9.32025-09-03GCVE DatabaseCVE-2025-55747 A directory traversal vulnerability in the XWiki platform webjars API allows unauthorized access to configuration files by exploiting URL encoding and decoding inconsistencies. This can expose sensitive configuration data. The issue affects multiple versions prior to 16.10.7 and 17.4.0-rc-1 and has been patched in those releases. No workaround other than upgrading is available. Report on CVE-2025-55747 Vulnerability CWE-23 #ghsa-qww7-89xh-x7m7 #maven	GCVE Database	2025-09-03

Page 1 of 1