CVE-2025-32970
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Apr 30, 2025
Updated: May 13, 2025
CWE ID 601
Summary
CVE-2025-32970 is a vulnerability affecting XWiki, a widely used wiki platform. In various versions, including those from 13.5-rc-1 to before 15.10.13, 16.0.0-rc-1 to before 16.4.4, and 16.5.0-rc-1 to before 16.8.0, an open redirect vulnerability exists in the HTML conversion request filter. Attackers can exploit this issue to construct URLs on XWiki instances, which redirect to any URL of their choice. This vulnerability has been addressed in the patched versions 15.10.13, 16.4.4, and 16.8.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Xwiki
Affected Vendors
- xwiki