https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:37:37 +0000 https://cve.radiocsirt.org/vuln/cve-2025-29924 <p><strong>Affected:</strong> xwiki-platform</p> <p>XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, it&#39;s possible for an user to get access to private information through the REST API - but could also be through another API - when a sub wiki is using &#34;Prevent unregistered users to view pages&#34;. The vulnerability only affects subwikis, and it only concerns specific right options such as &#34;Prevent unregistered users to view pages&#34;. or &#34;Prevent unregistered users to edit pages&#34;. It&#39;s possible to detect the vulnerability by enabling &#34;Prevent unregistered users to view pages&#34; and then trying to access a page through the REST API without using any credentials. The vulnerability has been patched in XWiki 15.10.14, 16.4.6 and 16.10.0RC1.</p> <p><strong>Affected:</strong> xwiki-platform</p> <p>XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, it&#39;s possible for an user to get access to private information through the REST API - but could also be through another API - when a sub wiki is using &#34;Prevent unregistered users to view pages&#34;. The vulnerability only affects subwikis, and it only concerns specific right options such as &#34;Prevent unregistered users to view pages&#34;. or &#34;Prevent unregistered users to edit pages&#34;. It&#39;s possible to detect the vulnerability by enabling &#34;Prevent unregistered users to view pages&#34; and then trying to access a page through the REST API without using any credentials. The vulnerability has been patched in XWiki 15.10.14, 16.4.6 and 16.10.0RC1.</p> https://cve.radiocsirt.org/vuln/cve-2025-29924