CVE-2025-27604
XWiki Confluence Migrator Pro's homepage is public
Summary
XWiki Confluence Migrator Pro's homepage is public
Original description
The description as published by the source.
XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com