XWiki Platform 访问控制错误漏洞

XWiki Platform is the XWiki open source suite of Wiki platforms for creating web collaboration applications. An access control error vulnerability exists in XWiki Platform versions 16.7.0 through 16.10.11, 17.4.4, and 17.7.0, which stems from an XJetty package exposure context that could lead to...

CVE-2025-55749: Improper Access Control

XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package XJetty, a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials...