{"action":"Upgrade com.xwiki.pro:xwiki-pro-macros-ui to 1.27.0 or later.","affected":[{"fixed":"1.27.0","introduced":"0"}],"component":"com.xwiki.pro:xwiki-pro-macros-ui","cve_ids":["CVE-2025-65089"],"ecosystem":"Maven","epss":0.00296,"exploited":false,"fixed_versions":["1.27.0"],"ghsa_id":"GHSA-8c52-x9w7-vc95","id":"tcs_01M5N8MEVVD92KCD32B2RZVF2F","modified_at":"2025-11-19T18:59:58Z","published_at":"2025-11-18T19:02:15Z","references":["https://osv.dev/vulnerability/GHSA-8c52-x9w7-vc95","https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-8c52-x9w7-vc95","https://nvd.nist.gov/vuln/detail/CVE-2025-65089","https://github.com/xwikisas/xwiki-pro-macros"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-8c52-x9w7-vc95","url":"https://osv.dev/vulnerability/GHSA-8c52-x9w7-vc95"}],"summary":"XWiki view file macro: User can view content of office file without view rights on the attachment"}