CVE-2025-65090 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.6, users with the rights to view the Calendar.JSONService page (i…
Medium CVSS: 5.3

CVE-2025-65090

XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.6, users with the rights to view the Calendar.JSONService page (including guest users) can exploit the data leak vulnerability by accessing database info, with the exception of passwords. This issue has been patched in version 2.4.6.
Vendor
Xwiki
Product
Full Calendar Macro
CWE
CWE-200
Yayın Tarihi
2026-01-10 04:16:01
Güncelleme
2026-01-29 17:27:42
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-200 Full Calendar Macro MEDIUM Xwiki 2026

Referanslar

https://github.com/xwiki-contrib/macro-fullcalendar/commit/25bc14c181c9a92f493b20ac264388c7ba171884 https://github.com/xwiki-contrib/macro-fullcalendar/security/advisories/GHSA-637h-ch24-xp9m https://jira.xwiki.org/browse/FULLCAL-82