Home

Description

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. This issue has been patched in version 1.27.0.

PUBLISHED Reserved 2025-11-17 | Published 2025-11-19 | Updated 2025-11-19 | Assigner GitHub_M




MEDIUM: 6.8CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Problem types

CWE-862: Missing Authorization

Product status

< 1.27.0
affected

References

github.com/...macros/security/advisories/GHSA-8c52-x9w7-vc95 exploit

github.com/...macros/security/advisories/GHSA-8c52-x9w7-vc95

cve.org (CVE-2025-65089)

nvd.nist.gov (CVE-2025-65089)

Download JSON