CVE-2025-27604: XWiki Confluence Migrator

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.

Affected products

• XWiki Confluence Migrator: before 1.11.7 (fixed in 1.11.7)

Published 2025-03-07. Last modified 2026-06-17.