CVE-2025-27604

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-27604
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27604.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-27604
Aliases
Published
2025-03-07T16:11:32.475Z
Modified
2025-12-05T08:53:54.174164Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
XWiki Confluence Migrator Pro's homepage is public
Details

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27604.json",
    "cwe_ids": [
        "CWE-200"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/xwikisas/application-confluence-migrator-pro

Affected ranges

Type
GIT
Repo
https://github.com/xwikisas/application-confluence-migrator-pro
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
791abfd8681866df6ad5766712701a5b8fcfd655

Affected versions

application-confluence-migrator-pro-1.*

application-confluence-migrator-pro-1.0
application-confluence-migrator-pro-1.0-rc-1
application-confluence-migrator-pro-1.0-rc-2
application-confluence-migrator-pro-1.0-rc-3
application-confluence-migrator-pro-1.0.1
application-confluence-migrator-pro-1.1.0
application-confluence-migrator-pro-1.10.0
application-confluence-migrator-pro-1.11.0
application-confluence-migrator-pro-1.11.1
application-confluence-migrator-pro-1.11.2
application-confluence-migrator-pro-1.11.3
application-confluence-migrator-pro-1.11.4
application-confluence-migrator-pro-1.11.5
application-confluence-migrator-pro-1.11.6
application-confluence-migrator-pro-1.2.0
application-confluence-migrator-pro-1.3.0
application-confluence-migrator-pro-1.4.0
application-confluence-migrator-pro-1.5.0
application-confluence-migrator-pro-1.6.0
application-confluence-migrator-pro-1.7.0
application-confluence-migrator-pro-1.7.1
application-confluence-migrator-pro-1.7.2
application-confluence-migrator-pro-1.7.3
application-confluence-migrator-pro-1.7.4
application-confluence-migrator-pro-1.7.5
application-confluence-migrator-pro-1.7.6
application-confluence-migrator-pro-1.7.7
application-confluence-migrator-pro-1.7.8
application-confluence-migrator-pro-1.7.9
application-confluence-migrator-pro-1.8.0
application-confluence-migrator-pro-1.8.1
application-confluence-migrator-pro-1.8.2
application-confluence-migrator-pro-1.8.3
application-confluence-migrator-pro-1.9
application-confluence-migrator-pro-1.9.1
application-confluence-migrator-pro-1.9.2
application-confluence-migrator-pro-1.9.3
application-confluence-migrator-pro-1.9.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27604.json"