CVE-2025-55747 — XWiki Platform's configuration files can be accessed through the webjars API
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are ac…
Published: 2025-09-03 · CVSS: 9.3 · CVSS 4.0
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7