Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-27604

XWiki Confluence Migrator Pro's homepage is public

Description

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

xwikisas application-confluence-migrator-pro

  • < 1.11.7affected

References