Maven/org.xwiki.platform:xwiki-platform-legacy-oldcore CVE-2025-54124: medium 6.5, EPSS 0.45%
XWiki leaks password hashes and other accessible password properties
Action: Upgrade org.xwiki.platform:xwiki-platform-legacy-oldcore to 16.4.7 (16.4.x), 16.10.5 (16.10.x) or 17.2.0-rc-1 (17.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.8-rc-1 | 16.4.7 | - |
| 16.5.0-rc-1 | 16.10.5 | - |
| 17.0.0-rc-1 | 17.2.0-rc-1 | - |
Fixed versions
| 16.4.7 | 16.10.5 | 17.2.0-rc-1 |
Sources
- osv: GHSA-r38m-cgpg-qj69#Maven/org.xwiki.platform:xwiki-platform-legacy-oldcore
- nvd: CVE-2025-54124
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r38m-cgpg-qj69
- https://github.com/xwiki/xwiki-platform/commit/f2ca8649cba2ed3765061660bf5c7f801afa0b24
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-22811
CVE-2025-54124 · published · modified · JSON