{"id":"GHSA-3w9f-2pph-j5vc","summary":"com.xwiki.confluencepro:application-confluence-migrator-pro-ui's application homepage is public","details":"### Impact\nThe homepage of the application is public which enables a guest to download the package which might contain sensitive information.\n\n### Patches\n1.11.7\n\n### Workarounds\nThe access to the page can be manually restricted to a specific set of users or groups.","aliases":["CVE-2025-27604"],"modified":"2025-03-07T19:16:54Z","published":"2025-03-07T16:19:25Z","database_specific":{"nvd_published_at":"2025-03-07T17:15:22Z","cwe_ids":["CWE-200"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2025-03-07T16:19:25Z"},"references":[{"type":"WEB","url":"https://github.com/xwikisas/application-confluence-migrator-pro/security/advisories/GHSA-3w9f-2pph-j5vc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27604"},{"type":"WEB","url":"https://github.com/xwikisas/application-confluence-migrator-pro/commit/6ced42b1f341fd0ce6734fc58c7d694da5f365fb"},{"type":"PACKAGE","url":"https://github.com/xwikisas/application-confluence-migrator-pro"}],"affected":[{"package":{"name":"com.xwiki.confluencepro:application-confluence-migrator-pro-ui","ecosystem":"Maven","purl":"pkg:maven/com.xwiki.confluencepro/application-confluence-migrator-pro-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.7"}]}],"database_specific":{"last_known_affected_version_range":"\u003c= 1.11.6","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/03/GHSA-3w9f-2pph-j5vc/GHSA-3w9f-2pph-j5vc.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}