Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/06/15 5:19 p.m.•9 views

CVE-2025-49582

XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with fewer rights, XWiki warns about the execution of these macros since XWiki 15.9RC1. These required rights analyzers that trigger these warnings are...

8.6CVSS7.3AI score0.00892EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2025/06/13 8:38 p.m.•32 views

XWiki's required right warnings for macros are incomplete

Impact When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with fewer rights, XWiki warns about the execution of these macros since XWiki 15.9RC1. These required rights analyzers that trigger these warnings are incomplete, allowing an...

8.6CVSS7.2AI score0.00892EPSS
SaveExploits1References11Affected Software4
NVD
NVD
•added 2025/06/13 5:15 p.m.•26 views

CVE-2025-49582

XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with fewer rights, XWiki warns about the execution of these macros since XWiki 15.9RC1. These required rights analyzers that trigger these warnings are...

8.6CVSS0.00892EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
•added 2025/06/13 4:41 p.m.•7 views

CVE-2025-49582 XWiki's required right warnings for macros are incomplete

XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with fewer rights, XWiki warns about the execution of these macros since XWiki 15.9RC1. These required rights analyzers that trigger these warnings are...

8.6CVSS7.4AI score0.00892EPSS
SaveExploits1References9
OSV
OSV
•added 2025/06/13 4:41 p.m.•16 views

CVE-2025-49582 XWiki's required right warnings for macros are incomplete

XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with fewer rights, XWiki warns about the execution of these macros since XWiki 15.9RC1. These required rights analyzers that trigger these warnings are...

8.6CVSS7.8AI score
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/13 12:00 a.m.•1 views

CVE-2025-49582: Insufficient UI Warning of Dangerous Operations

XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with fewer rights, XWiki warns about the execution of these macros since XWiki 15.9RC1. These required rights analyzers that trigger these warnings are...

8.6CVSS6.5AI score0.00892EPSS
SaveExploits1References1
Rows per page
Query Builder