AdminTools.SpammedPages Component XWiki Access Disclosure

The vulnerability of the AdminTools.SpammedPages component in the XWiki Admin Tools administrative tool for the XWiki Platform, a platform for creating collaborative web applications, is related to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to...

CVE-2025-54990

XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Prior to version 1.1, users without admin rights have access to AdminTools.SpammedPages. View rights are not restricted only to admin users for AdminTools.SpammedPages. While no data is visible to non admin...

CVE-2025-54990: Incorrect Default Permissions

XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Prior to version 1.1, users without admin rights have access to AdminTools.SpammedPages. View rights are not restricted only to admin users for AdminTools.SpammedPages. While no data is visible to non admin...