CVE-2025-27604CWE-200

XWiki Confluence Migrator Pro's homepage is public

High · published March 7, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-03-07T16:11Z
EPSS history
Timeline
  • 07 MAR 16:11Z
    XWiki Confluence Migrator Pro's homepage is public
    cvelistv5