PT-2025-49257 · Xwiki · Xwiki Remote Macros

Published 2025-12-05 · Updated 2026-02-20 · CVE-2025-65036

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions XWiki Remote Macros versions prior to 1.27.1

Description The software includes XWiki rendering macros designed for content migration from Confluence. Prior to version 1.27.1, the macro executes Velocity code from details pages without proper permission checks. This can potentially allow for remote code execution.

Recommendations Update to version 1.27.1 or later.

Exploit

Fix

RCE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-65036

GHSA-472X-FWH9-R82F

Affected Products

Xwiki Remote Macros

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65036.json · Exploit
• https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-472x-fwh9-r82f · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-65036 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65036 · Security Note
• https://t.me/poxek/5747 · Telegram Post
• https://t.me/cveNotify/152603 · Telegram Post
• https://twitter.com/CVEnew/status/1996980169752695217 · Twitter Post