Description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7.
Remediation
References
Related Vulnerabilities
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-43425)
Apache Tomcat Configuration Vulnerability (CVE-2010-4312)
WordPress Plugin Prevent files/folders access Cross-Site Request Forgery (1.1.1)
Grafana Improper Verification of Cryptographic Signature Vulnerability (CVE-2022-31123)
WordPress Plugin Product Import Export for WooCommerce Cross-Site Request Forgery (1.7.4)