CVE-2025-32429
1 advisory.
Maven/org.xwiki.platform:xwiki-platform-distribution-war CVE-2025-32429: critical 9.8
XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter
Action: Upgrade org.xwiki.platform:xwiki-platform-distribution-war to 16.10.6 (16.x) or 17.3.0-rc-1 (17.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.4-rc-1 | 16.10.6 | - |
| 17.0.0-rc-1 | 17.3.0-rc-1 | - |
Fixed versions
| 16.10.6 | 17.3.0-rc-1 |
Sources
- osv: GHSA-vr59-gm53-v7cq
- nvd: CVE-2025-32429
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vr59-gm53-v7cq
- https://github.com/xwiki/xwiki-platform/commit/dfd0744e9c18d24ac66a0d261dc6cafd1c209101
- https://github.com/xwiki/xwiki-platform/commit/f502b5d5fd36284a50890ad26d168b7d8dc80bd3
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-23093
CVE-2025-32429 · published · modified · JSON