CVE-2025-27604: com.xwiki.confluencepro:application-confluence-migrator-pro-ui's application homepage is public

March 7, 2025

The homepage of the application is public which enables a guest to download the package which might contain sensitive information.

References

github.com/advisories/GHSA-3w9f-2pph-j5vc
github.com/xwikisas/application-confluence-migrator-pro
github.com/xwikisas/application-confluence-migrator-pro/security/advisories/GHSA-3w9f-2pph-j5vc
nvd.nist.gov/vuln/detail/CVE-2025-27604

Detect and mitigate CVE-2025-27604 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →