XWiki CVE-2025-49582 Macro Permission Bypass Leading to RCE
Security Advisory
CVE-2025-49582
High
XWiki
Affected:
- org.xwiki.platform:xwiki-platform-rendering-macro-cache >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
- org.xwiki.platform:xwiki-platform-rendering-macro-context >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
- org.xwiki.platform:xwiki-platform-rendering-xwiki >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
- org.xwiki.platform:xwiki-platform-security-requiredrights-default >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
Fixed in:
- 16.4.7
- 16.10.3
- 17.0.0
Referenced CVEs:
CVE-2025-49582
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.