CVE-2025-55747 — CRITICAL (9.1)

Q: How severe is CVE-2025-55747?

CVE-2025-55747 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Q: Is there a patch for CVE-2025-55747?

Check the references section above for vendor advisories and patch information. Affected products include: Xwiki Xwiki.

Vulnerability Description

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Xwiki	Xwiki	>= 6.2, < 16.10.7

Related Weaknesses (CWE)

CWE-23

References

https://github.com/xwiki/xwiki-platform/commit/9e7b4c03f2143978d891109a17159f73dPatch
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qww7-89xh-x7m7Vendor Advisory
https://jira.xwiki.org/browse/XWIKI-19350Issue TrackingVendor Advisory

FAQ

What is CVE-2025-55747?

CVE-2025-55747 is a vulnerability with a CVSS score of 9.1 (CRITICAL). XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the we...

How severe is CVE-2025-55747?

CVE-2025-55747 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-55747?

Check the references section above for vendor advisories and patch information. Affected products include: Xwiki Xwiki.