Vulnerabilidades do Xwiki Pro Macros

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Xwiki Pro Macros: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:xwiki:pro_macros

CVE-2025-65036 Alta · 8.3 CWE-862 05/12/2025

XWiki Remote Macros vulnerable to remote code execution using the confluence details summary macro

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from the details pages without checking for permissions, which can lead to remote code execution. This vulnerability is fixed in 1.27.1.

CVE-2025-65089 Média · 6.5 CWE-862 19/11/2025

XWiki view file macro: User can view content of office file without view rights on the attachment

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. This issue has been patched in version 1.27.0.