Approved changes feed: RSS · Atom

cpe:2.3:a:xwiki:confluence_migrator:*:*:*:*:pro:xwiki:*:*

part: a version: * update: *

VendorXwiki (cdc9c0cd-6ac5-5dc0-9f52-915ebd57f20d)
ProductConfluence Migrator (78c81aac-81ae-53c3-a52d-75db46eeadc2)
Edition*
Language*
Software editionpro
Target softwarexwiki
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/xwiki-attic/application-confluence-migrator purl2cpe 2026-06-01 10:18:15.610235

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27604 vulnerable 2026-06-03 15:00:12.943836 XWiki Confluence Migrator Pro's homepage is public
HIGH (7.5)
XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.
Published: 2025-03-07T16:11:32.475Z
Updated: 2025-03-07T17:56:42.640Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.