{"action":"Upgrade org.xwiki.platform:xwiki-platform-oldcore to 16.4.7 (16.4.x), 16.10.3 (16.10.x) or 17.0.0 (17.0.x) or later.","affected":[{"fixed":"16.4.7","introduced":"7.2-milestone-2"},{"fixed":"16.10.3","introduced":"16.5.0-rc-1"},{"fixed":"17.0.0","introduced":"17.0.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-oldcore","cve_ids":["CVE-2025-49586"],"ecosystem":"Maven","epss":0.00749,"exploited":false,"fixed_versions":["16.4.7","16.10.3","17.0.0"],"ghsa_id":"GHSA-jp4x-w9cj-97q7","id":"tcs_01M5N93B0YSCFQ3RR3532GT643","modified_at":"2025-06-13T21:12:18.017662Z","published_at":"2025-06-13T20:46:21Z","references":["https://osv.dev/vulnerability/GHSA-jp4x-w9cj-97q7","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-jp4x-w9cj-97q7","https://nvd.nist.gov/vuln/detail/CVE-2025-49586","https://github.com/xwiki/xwiki-platform/commit/ef978315649cf83eae396021bb33603a1a5f7e42","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-22719"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-jp4x-w9cj-97q7","url":"https://osv.dev/vulnerability/GHSA-jp4x-w9cj-97q7"},{"source":"nvd","source_id":"CVE-2025-49586","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49586"}],"summary":"XWiki allows remote code execution through preview of XClass changes in AWM editor"}