The vulnerability of the AdminTools.SpammedPages component of the XWiki Admin Tools administrative tool for the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows a perpetrator to gain access to protected information.

The vulnerability of the AdminTools.SpammedPages component in the XWiki Admin Tools administrative tool for the XWiki Platform, a platform for creating collaborative web applications, is related to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to...

CVE-2025-54990: Incorrect Default Permissions

XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Prior to version 1.1, users without admin rights have access to AdminTools.SpammedPages. View rights are not restricted only to admin users for AdminTools.SpammedPages. While no data is visible to non admin...