CVE-2025-65089

Description

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. This issue has been patched in version 1.27.0.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.024

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2025-65089 are fixed in Xwiki - xwiki-pro-macros-ui 1.27.0	Windows
Vulnerabilities CVE-2025-65089 are fixed in Xwiki - xwiki-pro-macros-ui for Linux 1.27.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234