References https://nvd.nist.gov/vuln/detail/CVE-2025-55747 https://www.cve.org/CVERecord?id=CVE-2025-55747 https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qww7-89xh-x7m7 https://jira.xwiki.org/browse/XWIKI-19350 https://www.sentinelone.com/vulnerability-database/cve-2025-55747/ https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55747.yaml https://www.ameeba.com/blog/cve-2025-55747-configuration-file-exposure-in-xwiki-platform/ https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-platform-webjars/CVE-2025-55747/ https://security-tracker.debian.org/tracker/CVE-2025-55747 https://cve.imfht.com/detail/CVE-2025-55747?lang=en
Related VulnerabilitiesHepta Platforms|Heptabase - Stored Cross-Site ScriptingServiceNow-AI-Platform /assessment_thanks.do 代码执行漏洞(CVE-2026-6875)PoCCVE-2026-6875: ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCEXWiki Platform /xwiki/bin/skin/ 目录遍历漏洞(CVE-2026-34151)XWiki /xwiki/rest/liveData/sources/liveTable/entries SQL 注入漏洞(CVE-2025-32429)Progress WhatsUp Gold /NmConsole/Platform/PerformanceMonitorErrors/HasErrors SQL 注入漏洞(CVE-2024-6670)PoCCVE-2026-20253: Splunk Enterprise & Cloud Platform - Unrestricted File UploadHepta Platforms|Heptabase - Exposed Dangerous Method or FunctionXWiki /bin/jsx/Main/WebHome 目录遍历漏洞(CVE-2026-23734)PoCCVE-2026-40105: XWiki - Cross-Site ScriptingXWiki存在XSS漏洞(CVE-2026-40105)万户 ezOFFICE /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../platform/bpm/work_flow/operate/wf_relation.jsp SQL 注入漏洞PoCzqnb-educationcloud-exposure: ZhongQing Education Cloud Platform - Information Exposure