{"action":"Upgrade org.xwiki.platform:xwiki-platform-webjars-api to 16.10.17 (16.10.x), 17.4.9 (17.4.x) or 17.10.3 (17.10.x) or later.","affected":[{"fixed":"16.10.17","introduced":"9.6-rc-1"},{"fixed":"17.4.9","introduced":"17.0.0-rc-1"},{"fixed":"17.10.3","introduced":"17.5.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-webjars-api","cve_ids":["CVE-2026-48047"],"ecosystem":"Maven","epss":0.00651,"exploited":false,"fixed_versions":["16.10.17","17.4.9","17.10.3"],"ghsa_id":"GHSA-vgwr-23fq-pr7g","id":"tcs_01M5N9E2WNC0Q2VZ7M494APHRP","modified_at":"2026-05-26T19:56:27.934739Z","published_at":"2026-05-26T19:33:44Z","references":["https://osv.dev/vulnerability/GHSA-vgwr-23fq-pr7g","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vgwr-23fq-pr7g","https://github.com/xwiki/xwiki-platform/commit/9f747fcd3200259a1de51957d3f5f6acc8e3816c","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-23902"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vgwr-23fq-pr7g","url":"https://osv.dev/vulnerability/GHSA-vgwr-23fq-pr7g"}],"summary":"XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin"}