CVE-2025-32970
1 advisory.
Maven/org.xwiki.platform:xwiki-platform-wysiwyg-api CVE-2025-32970: medium 6.1, EPSS 0.58%
org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability
Action: Upgrade org.xwiki.platform:xwiki-platform-wysiwyg-api to 15.10.13 (15.10.x), 16.4.4 (16.4.x) or 16.8.0 (16.8.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.5-rc-1 | 15.10.13 | - |
| 16.0.0-rc-1 | 16.4.4 | - |
| 16.5.0-rc-1 | 16.8.0 | - |
Fixed versions
| 15.10.13 | 16.4.4 | 16.8.0 |
Sources
- osv: GHSA-pjhg-9wr9-rj96
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-pjhg-9wr9-rj96
- https://nvd.nist.gov/vuln/detail/CVE-2025-32970
- https://github.com/xwiki/xwiki-platform/commit/6dab7909f45deb00efd36a0cd47788e95ad64802
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-22487
CVE-2025-32970 · published · modified · JSON