Maven/org.xwiki.platform:xwiki-platform-skin-skinx CVE-2025-55748: high 7.5, EPSS 1.84%
XWiki configuration files can be accessed through jsx and sx endpoints
Action: Upgrade org.xwiki.platform:xwiki-platform-skin-skinx to 16.10.7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2-milestone-2 | 16.10.7 | - |
Fixed versions
| 16.10.7 |
Sources
- osv: GHSA-m63c-3rmg-r2cf
- nvd: CVE-2025-55748
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m63c-3rmg-r2cf
- https://github.com/xwiki/xwiki-platform/commit/9e7b4c03f2143978d891109a17159f73d4cdd318#diff-ee78930a9ac5ea586179fe8ab88a5fd58e369d175927d1e88a0b4dbc3ebcbf1eR62
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-23109
CVE-2025-55748 · published · modified · JSON