{"action":"Upgrade org.xwiki.platform:xwiki-platform-security-authorization-bridge to 16.10.4 (16.x) or 17.1.0-rc-1 (17.x) or later.","affected":[{"fixed":"16.10.4","introduced":"16.10.0-rc-1"},{"fixed":"17.1.0-rc-1","introduced":"17.0.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-security-authorization-bridge","cve_ids":["CVE-2025-48063"],"ecosystem":"Maven","epss":0.01033,"exploited":false,"fixed_versions":["16.10.4","17.1.0-rc-1"],"ghsa_id":"GHSA-rhfv-688c-p6hp","id":"tcs_01M5N9BWVX0YP0GXD6JVQQHG12","modified_at":"2025-05-21T19:41:18Z","published_at":"2025-05-21T18:26:21Z","references":["https://osv.dev/vulnerability/GHSA-rhfv-688c-p6hp","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rhfv-688c-p6hp","https://nvd.nist.gov/vuln/detail/CVE-2025-48063","https://github.com/xwiki/xwiki-platform/commit/2557813aef3b863988d6cca58de996e207086898","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-22859"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-rhfv-688c-p6hp","url":"https://osv.dev/vulnerability/GHSA-rhfv-688c-p6hp"},{"source":"nvd","source_id":"CVE-2025-48063","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48063"}],"summary":"XWiki Platform Security Authorization Bridge allows users with just edit right can enforce required rights with programming right"}