{"action":"Upgrade org.xwiki.platform:xwiki-platform-webjars-api to 16.10.7 (16.x) or 17.4.0-rc-1 (17.x) or later.","affected":[{"fixed":"16.10.7","introduced":"7.1.4"},{"fixed":"17.4.0-rc-1","introduced":"17.0.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-webjars-api","cve_ids":["CVE-2025-55747"],"ecosystem":"Maven","epss":0.01682,"exploited":false,"fixed_versions":["16.10.7","17.4.0-rc-1"],"ghsa_id":"GHSA-qww7-89xh-x7m7","id":"tcs_01M5N9AEK0SDVM0BS3BW64VKZQ","modified_at":"2026-05-05T15:55:48.710457Z","published_at":"2025-09-03T17:42:51Z","references":["https://osv.dev/vulnerability/GHSA-qww7-89xh-x7m7","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qww7-89xh-x7m7","https://nvd.nist.gov/vuln/detail/CVE-2025-55747","https://github.com/xwiki/xwiki-platform/commit/9e7b4c03f2143978d891109a17159f73d4cdd318#diff-45ea9c87d5fb68cd5db0da7f78cf25e76f1325f5fe56e21618b21786fc706236R80-R81","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19350"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-qww7-89xh-x7m7","url":"https://osv.dev/vulnerability/GHSA-qww7-89xh-x7m7"},{"source":"nvd","source_id":"CVE-2025-55747","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55747"}],"summary":"XWiki configuration files can be accessed through the webjars API"}