Log in Start free

Vulnerability · Published Apr 3, 2025 · Assigned by GitHub_M

CVE-2025-31487The XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA server

High 7.7

In plain English

A high-severity XML external entity in jira from xwiki-contrib. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.4%top 65.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The XWiki JIRA extension provides various integration points between XWiki and JIRA (macros, UI, CKEditor plugin). If the JIRA macro is installed, any logged in XWiki user could edit his/her user profile wiki page and use that JIRA macro, specifying a fake JIRA URL that returns an XML specifying a DOCTYPE pointing to a local file on the XWiki server host and displaying that file's content in one of the returned JIRA fields (such as the summary or description for example). The vulnerability has been patched in the JIRA Extension v8.6.5.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Mavenorg.xwiki.contrib.jira:jira-macro-default8.5.6GHSA-wc53-4255-gw3f

Affected products (as reported)

VendorProductVersions
xwiki-contrib jira >= 4.2, < 8.5.6

Weakness: CWE-611 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

References