Filtered by vendor Xwiki Subscriptions
Filtered by product Wiki-platform Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-55749 1 Xwiki 3 Wiki-platform, Xwiki, Xwiki-platform 2026-02-06 7.5 High
XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package (XJetty), a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials. Fixed in 16.10.11, 17.4.4, and 17.7.0.