CVE-2025-54125 Scanner

XWiki is a versatile open-source wiki platform used by organizations and individuals to manage documentation and collaborate on projects. Designed to facilitate knowledge management, XWiki allows users to create, edit, and share content in a structured manner. It is commonly deployed in corporate environments for internal documentation, as well as in educational settings for collaborative learning. With its extensive customization possibilities through extensions and plugins, XWiki meets diverse needs ranging from simple wiki pages to complex content management systems. Users benefit from its robust search capabilities and permissions management, which foster efficient information sharing. However, security vulnerabilities can arise, affecting the confidentiality and integrity of the platform's data.

The Information Disclosure vulnerability in XWiki allows unauthorized access to sensitive information through the XML view functionality. This vulnerability is particularly concerning as it can expose information like passwords and email addresses stored in fields users may not recognize as sensitive. Attackers can exploit this by accessing user profiles with the 'xml.vm' template, which renders user data in XML format without proper access controls. The issue arises from insufficient validation of user permissions when generating XML output, allowing any authenticated user to retrieve sensitive fields from other users' profiles.

Specifically, the vulnerability exists in the 'xml.vm' template used by XWiki's REST API to serialize user objects. An attacker can craft a request to '/xwiki/bin/view/XWiki/?xpage=xml' to retrieve the target user's profile in XML format. This endpoint does not enforce proper access controls, meaning any authenticated user can access the XML representation of any other user, including fields marked as private or sensitive. The vulnerability affects all XWiki versions prior to the patch for CVE-2025-54125.

If exploited, an attacker can harvest sensitive information such as hashed passwords, email addresses, and other personal data from user profiles. This information can be used for further attacks, including credential stuffing, phishing campaigns, or social engineering. In enterprise environments, exposure of internal user data can lead to compliance violations and reputational damage. The CVSS score of 7.5 reflects the high confidentiality impact and the low complexity of exploitation, making it a critical risk for XWiki deployments.