Test ID:	1.3.6.1.4.1.25623.1.0.128114
Category:	Web application abuses
Title:	XWiki 1.9 < 15.10.14, 16.x < 16.4.6, 16.5.x < 16.10.0-rc-1 Authorization Bypass Vulnerability (GHSA-22q5-9phm-744v)
Summary:	Xwiki is prone to an authorization bypass vulnerability.
Description:	Summary: Xwiki is prone to an authorization bypass vulnerability. Vulnerability Insight: The vulnerability in sub wiki allows users to access private information through the REST API when 'Prevent unregistered users to view pages' or 'Prevent unregistered users to edit pages' is enabled. Affected Software/OS: XWiki versions 1.9 prior to 15.10.14, 16.x prior to 16.4.6 and 16.5.x prior to 16.10.0-rc-1. Solution: Update to versions 15.10.14, 16.4.6, 16.10.0-rc-1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2025-29925
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.