{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"6.1-miletone-2","last_affected":"7.1.3"}],"component":"org.xwiki.platform:xwiki-platform-webjars","cve_ids":["CVE-2025-55747"],"ecosystem":"Maven","epss":0.01682,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qww7-89xh-x7m7","id":"tcs_01M5N9AEQQJFVDZWCQFH5H6E2N","modified_at":"2026-05-05T15:55:48.710457Z","published_at":"2025-09-03T17:42:51Z","references":["https://osv.dev/vulnerability/GHSA-qww7-89xh-x7m7","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qww7-89xh-x7m7","https://nvd.nist.gov/vuln/detail/CVE-2025-55747","https://github.com/xwiki/xwiki-platform/commit/9e7b4c03f2143978d891109a17159f73d4cdd318#diff-45ea9c87d5fb68cd5db0da7f78cf25e76f1325f5fe56e21618b21786fc706236R80-R81","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19350"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-qww7-89xh-x7m7#Maven/org.xwiki.platform:xwiki-platform-webjars","url":"https://osv.dev/vulnerability/GHSA-qww7-89xh-x7m7"},{"source":"nvd","source_id":"CVE-2025-55747","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55747"}],"summary":"XWiki configuration files can be accessed through the webjars API"}