VulnCheck KEV: CVE-2025-46554

🗓️ 04 Sep 2025 00:00:00Reported by VulnCheckType

XWiki lets unauthenticated users view any attachment metadata via web endpoint; patched in affected versions.

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the org.xwiki.platform:xwiki-platform-repository-rest-server component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows attackers to gain unauthorized access to protected information.	9 May 202500:00	–	bdu_fstec
Circl	CVE-2025-46554	30 Apr 202519:13	–	circl
CNNVD	XWiki Platform 安全漏洞	30 Apr 202500:00	–	cnnvd
CVE	CVE-2025-46554	30 Apr 202518:27	–	cve
Cvelist	CVE-2025-46554 XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API	30 Apr 202518:27	–	cvelist
EUVD	EUVD-2025-12749	3 Oct 202520:07	–	euvd
Github Security Blog	XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API	30 Apr 202516:49	–	github
Nuclei	XWiki REST API - Attachments Disclosure	4 Feb 202607:00	–	nuclei
NVD	CVE-2025-46554	30 Apr 202519:15	–	nvd
OpenVAS	XWiki 1.8.1 < 14.10.22, 15.0-rc-1 < 15.10.12, 16.0.0-rc-1 < 16.4.3, 16.5.0-rc-1 < 16.7.0 Improper Authorization Vulnerability (GHSA-r5cr-xm48-97xp)	18 Jul 202500:00	–	openvas