XWiki CVE-2025-49582 宏权限绕过致RCE漏洞

github.com 2025-06-15 View in English → 日本語 →

Security Advisory CVE-2025-49582 High XWiki

Affected:

org.xwiki.platform:xwiki-platform-rendering-macro-cache >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
org.xwiki.platform:xwiki-platform-rendering-macro-context >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
org.xwiki.platform:xwiki-platform-rendering-xwiki >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
org.xwiki.platform:xwiki-platform-security-requiredrights-default >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0

Fixed in:

Referenced CVEs: CVE-2025-49582

文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档

本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。