CVE-2025-54990

XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Prior to version 1.1, users without admin rights have access to AdminTools.SpammedPages. View rights are not restricted only to admin users for AdminTools.SpammedPages. While no data is visible to non admin...

CVE-2025-54990

CVE-2025-54990 affects XWiki AdminTools prior to version 1.1. The issue is that AdminTools.SpammedPages could be accessed by users without admin rights; while non-admin users reportedly could not see data, the page itself remained accessible due to insufficient permissions on the AdminTools space...

CVE-2025-54990 XWiki AdminTools application doesn't set permissions on the AdminTools space

XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Prior to version 1.1, users without admin rights have access to AdminTools.SpammedPages. View rights are not restricted only to admin users for AdminTools.SpammedPages. While no data is visible to non admin...

Admin Tools Application 安全漏洞

Admin Tools Application is an advanced administration tool for XWiki open-sourced by the XWiki Foundation. A security vulnerability exists in versions of Admin Tools Application prior to 1.1, which stems from improper access control and could lead to non-administrative users accessing...