XWiki CVE-2025-49582 Macro Permission Bypass Leading to RCE
Security Advisory
CVE-2025-49582
High
XWiki
Affected:
- org.xwiki.platform:xwiki-platform-rendering-macro-cache >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
- org.xwiki.platform:xwiki-platform-rendering-macro-context >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
- org.xwiki.platform:xwiki-platform-rendering-xwiki >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
- org.xwiki.platform:xwiki-platform-security-requiredrights-default >= 15.9-rc1, < 16.4.7; >= 16.5.0-rc1, < 16.10.3; >= 17.0.0-rc1, < 17.0.0
Fixed in:
- 16.4.7
- 16.10.3
- 17.0.0
参照 CVE:
CVE-2025-49582
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。