GitHub Advisoryadvisory · Maven

GHSA-m63c-3rmg-r2cf XWiki configuration files can be accessed through jsx and sx endpoints

CRITICAL Published 2025-09-03 Modified 2025-09-10 Official page ↗
Aliases
CVE-2025-55748
Ecosystem
Maven
Packages
org.xwiki.platform:xwiki-platform-skin-skinx
Severity
Critical
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weaknesses
CWE-23
Reviewed
2025-09-03

Affected packages

• Maven org.xwiki.platform:xwiki-platform-skin-skinx: >= 4.2-milestone-2, < 16.10.7 → fixed in 16.10.7

Description

Impact It's possible to get access and read configuration files by using URLs such as `http://localhost:8080/bin/ssx/Main/WebHome?resource=../../WEB-INF/xwiki.cfg&minify=false`. This can apparently be reproduced on Tomcat instances. Patches This has been patched in 17.4.0-rc-1, 16.10.7. Workarounds There is no known workaround, other than upgrading XWiki. For more information If you have any questions or comments about this advisory: • Open an issue in Jira XWiki.org • Email us at Security Mailing List Attribution The vulnerability was reported by Gregor Neumann.

Related

Alias · CVE (1)

  • CVE-2025-55748 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. vulnerability

Weakness · CWE (1)

  • CWE-23 Relative Path Traversal weakness

References