PT-2025-36929 · Xwiki · Xwiki Remote Macros

Michael Hamann · Published 2025-09-09 · Updated 2025-09-10 · CVE-2025-55729

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: XWiki Remote Macros versions 1.0 through 1.26.5

Description: XWiki Remote Macros provides XWiki rendering macros used for migrating content from Confluence. A missing escaping mechanism in the ac:type parameter within the ConfluenceLayoutSection macro allows for remote code execution. The classes parameter is used without proper escaping in XWiki syntax, enabling XWiki syntax injection, which also leads to remote code execution.

Recommendations: Update to version 1.26.5 or later.

Exploit

Fix

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-116

Related Identifiers

CVE-2025-55729

GHSA-22XJ-JPJG-GPGW

Affected Products

Xwiki Remote Macros

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55729.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-55729 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55729 · Security Note
• https://github.com/xwikisas/xwiki-pro-macros/commit/06e6cf3893227527d0242a11e390642178d9df05 · Note
• https://github.com/xwikisas/xwiki-pro-macros/blob/93ac1a38c829e3ef787379b2b45eb043a573e5f7/xwiki-pro-macros-confluence-bridges/xwiki-pro-macros-confluence-bridges-ui/src/main/resources/Confluence/Macros/ConfluenceLayoutSection.xml#L518 · Note
• https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-22xj-jpjg-gpgw · Note
• https://jira.xwiki.org/browse/XWIKI-20449 · Note
• https://twitter.com/CCBalert/status/1965791864541364575 · Twitter Post
• https://twitter.com/CVEnew/status/1965509624188338558 · Twitter Post