GHSA-v7r8-8p5c-h4xw
Medium · 5.3CVSS
5.3
EPSS
—
Published
Nov 18, 2025
CISA due date
—
The record
XWiki AdminTools application doesn't set permissions on the AdminTools space
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | com.xwiki.admintools:application-admintools | 0 | 1.1 |
Related vulnerabilities
- CVE-2025-54990 XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Same vulnerability
- CVE-2026-11813 A potential improper permissions vulnerability was reported in the Lenovo Filez Client… CWE-276
- CVE-2026-52766 YesWiki is a wiki system written in PHP. CWE-276
- CVE-2026-77393 In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped… CWE-276
- CVE-2026-75166 Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05… CWE-276
- CVE-2026-81302 PALLET CONTROL products contain an incorrect default permission vulnerability, which may… CWE-276
- CVE-2026-9634 A security issue exists within the Redundancy Module Configuration Tool. CWE-276
- CVE-2026-9633 A security issue exists within the Redundancy Module Configuration Tool. CWE-276