{"action":"Upgrade org.xwiki.platform:xwiki-platform-rendering-macro-context to 16.4.7 (16.4.x), 16.10.3 (16.10.x) or 17.0.0 (17.0.x) or later.","affected":[{"fixed":"16.4.7","introduced":"15.9-rc-1"},{"fixed":"16.10.3","introduced":"16.5.0-rc-1"},{"fixed":"17.0.0","introduced":"17.0.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-rendering-macro-context","cve_ids":["CVE-2025-49582"],"ecosystem":"Maven","epss":0.00914,"exploited":false,"fixed_versions":["16.4.7","16.10.3","17.0.0"],"ghsa_id":"GHSA-c32m-27pj-4xcj","id":"tcs_01M5N8R8QXGSRP8XWZCXM04S6R","modified_at":"2025-11-04T09:58:16Z","published_at":"2025-06-13T20:38:58Z","references":["https://osv.dev/vulnerability/GHSA-c32m-27pj-4xcj","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-c32m-27pj-4xcj","https://nvd.nist.gov/vuln/detail/CVE-2025-49582","https://github.com/xwiki/xwiki-platform/commit/0a705e8e253cb871b804e25c53b2bde879c886bd","https://github.com/xwiki/xwiki-platform/commit/3d451e957fe2b14459e9ac64172b4a0e4c46971c","https://github.com/xwiki/xwiki-platform/commit/abdcefc0db27035b67329add836fd683e0cf92b8","https://github.com/xwiki/xwiki-platform/commit/cc74dc802efe0e2d3fa2ba3355dbadc51c5fd8c7","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-22758","https://jira.xwiki.org/browse/XWIKI-22759","https://jira.xwiki.org/browse/XWIKI-22763","https://jira.xwiki.org/browse/XWIKI-22799"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-c32m-27pj-4xcj#Maven/org.xwiki.platform:xwiki-platform-rendering-macro-context","url":"https://osv.dev/vulnerability/GHSA-c32m-27pj-4xcj"},{"source":"nvd","source_id":"CVE-2025-49582","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49582"}],"summary":"XWiki's required right warnings for macros are incomplete"}