1. Home
  2. CVE Database
  3. CVE-2025-27604
HIGH · 7.5

CVE-2025-27604

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might ...

Vulnerability Description

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
XwikiConfluence Migrator< 1.11.7

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2025-27604?

CVE-2025-27604 is a vulnerability with a CVSS score of 7.5 (HIGH). XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might ...

How severe is CVE-2025-27604?

CVE-2025-27604 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-27604?

Check the references section above for vendor advisories and patch information. Affected products include: Xwiki Confluence Migrator.