CVE-2025-55747
XWiki Platform's configuration files can be accessed through the webjars API
Summary
XWiki Platform's configuration files can be accessed through the webjars API
Original description
The description as published by the source.
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web jira.xwiki.org