CVE-2025-55749: Improper Access Control

XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package XJetty, a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials...

XWiki Platform Access Control Vulnerability

XWiki Platform is the XWiki open source suite of Wiki platforms for creating web collaboration applications. An access control error vulnerability exists in XWiki Platform versions 16.7.0 through 16.10.11, 17.4.4, and 17.7.0, which stems from an XJetty package exposure context that could lead to...

PT-2025-48917

Уязвимость пакета XWiki Jetty XJetty платформы создания совместных веб-приложений XWiki Platform XWiki связана с недостатками механизма контроля доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации путем...