{"action":"Upgrade org.xwiki.platform:xwiki-platform-rest-server to 16.4.7 (16.4.x), 16.10.3 (16.10.x) or 17.0.0 (17.0.x) or later.","affected":[{"fixed":"16.4.7","introduced":"10.9"},{"fixed":"16.10.3","introduced":"16.5.0-rc-1"},{"fixed":"17.0.0","introduced":"17.0.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-rest-server","cve_ids":["CVE-2025-49584"],"ecosystem":"Maven","epss":0.00445,"exploited":false,"fixed_versions":["16.4.7","16.10.3","17.0.0"],"ghsa_id":"GHSA-mvp5-qx9c-c3fv","id":"tcs_01M5N95TQSDH6FBEYBPVZ30S7A","modified_at":"2025-06-13T21:12:17.868617Z","published_at":"2025-06-13T20:42:12Z","references":["https://osv.dev/vulnerability/GHSA-mvp5-qx9c-c3fv","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-mvp5-qx9c-c3fv","https://nvd.nist.gov/vuln/detail/CVE-2025-49584","https://github.com/xwiki/xwiki-platform/commit/ee642f973a7c95d2d146fe03c81bcdee1871f4ec","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-22736"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mvp5-qx9c-c3fv","url":"https://osv.dev/vulnerability/GHSA-mvp5-qx9c-c3fv"},{"source":"nvd","source_id":"CVE-2025-49584","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49584"}],"summary":"XWiki makes title of inaccessible pages available through the class property values REST API"}