{"action":"Upgrade org.xwiki.platform:xwiki-platform-skin-skinx to 16.10.7 or later.","affected":[{"fixed":"16.10.7","introduced":"4.2-milestone-2"}],"component":"org.xwiki.platform:xwiki-platform-skin-skinx","cve_ids":["CVE-2025-55748"],"ecosystem":"Maven","epss":0.01843,"exploited":false,"fixed_versions":["16.10.7"],"ghsa_id":"GHSA-m63c-3rmg-r2cf","id":"tcs_01M5N94G6WRTVMERJNHX4B27AK","modified_at":"2025-09-10T21:14:00Z","published_at":"2025-09-03T17:45:11Z","references":["https://osv.dev/vulnerability/GHSA-m63c-3rmg-r2cf","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m63c-3rmg-r2cf","https://nvd.nist.gov/vuln/detail/CVE-2025-55748","https://github.com/xwiki/xwiki-platform/commit/9e7b4c03f2143978d891109a17159f73d4cdd318#diff-ee78930a9ac5ea586179fe8ab88a5fd58e369d175927d1e88a0b4dbc3ebcbf1eR62","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-23109"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m63c-3rmg-r2cf","url":"https://osv.dev/vulnerability/GHSA-m63c-3rmg-r2cf"},{"source":"nvd","source_id":"CVE-2025-55748","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55748"}],"summary":"XWiki configuration files can be accessed through jsx and sx endpoints"}