PT-2025-10115 · Xwiki · Xwiki Confluence Migrator Pro

Publicado 2025-03-07 · Atualizado 2025-03-08 · CVE-2025-27604

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions XWiki Confluence Migrator Pro versions prior to 1.11.7

Description The application's homepage is publicly accessible, allowing guests to download packages that may contain sensitive information.

Recommendations For versions prior to 1.11.7, update to version 1.11.7 to fix the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2025-10720

CVE-2025-27604

GHSA-3W9F-2PPH-J5VC

Produtos afetados

Xwiki Confluence Migrator Pro

Referências · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27604.json · Exploit
• https://github.com/xwikisas/application-confluence-migrator-pro/security/advisories/GHSA-3w9f-2pph-j5vc · Aviso do Fabricante
• https://github.com/xwikisas/application-confluence-migrator-pro/commit/6ced42b1f341fd0ce6734fc58c7d694da5f365fb · Correção
• https://github.com/xwikisas/application-confluence-migrator-pro · Nota
• https://t.me/cvedetector/19839 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2025-10720 · Nota de Segurança
• https://t.me/latest_high_impact_cve/1935 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1898246362585612439 · Publicação no Twitter
• https://t.me/cvetracker/18703 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-27604 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-3w9f-2pph-j5vc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-27604 · Nota de Segurança