Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2025/12/01 6:59 p.m.•36 views

GHSA-53GX-J3P6-2RW9 XWiki Jetty Package (XJetty) allows accessing any application file through URL

Impact In an instance which is using the XWiki Jetty package XJetty, a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials, like http://myhots/webapps/xwiki/WEB-INF/xwiki.cfg,...

8.7CVSS7AI score0.01471EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2025/12/01 6:59 p.m.•30 views

XWiki Jetty Package (XJetty) allows accessing any application file through URL

Impact In an instance which is using the XWiki Jetty package XJetty, a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials, like http://myhots/webapps/xwiki/WEB-INF/xwiki.cfg,...

8.7CVSS6.9AI score0.01471EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/01 12:00 a.m.•8 views

PT-2025-54746

Impact In an instance which is using the XWiki Jetty package XJetty, a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials, like http://myhots/webapps/xwiki/WEB-INF/xwiki.cfg,...

8.7CVSS7AI score0.01471EPSS
SaveExploits0References8
Rows per page
Query Builder