Product

org.xwiki.platform/xwiki-platform-lesscss-script vulnerabilities

1 published CVE affecting org.xwiki.platform/xwiki-platform-lesscss-script, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.xwiki.platform/xwiki-platform-lesscss-script CVEs

Newest publication first

CVE-2025-32972 The lesscss script service allows cache clearing without programming right
Published 2025-04-30

MediumCVSS 5.3 EPSS 0.52%

XWiki is a generic wiki platform. In versions starting from 6.1-milestone-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the script API of the LESS compiler in XWiki is incorrectly checking for rights when calling the cache cl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.xwiki.platform/xwiki-platform-lesscss-script vulnerabilities

Latest org.xwiki.platform/xwiki-platform-lesscss-script CVEs

CVE-2025-32972 The lesscss script service allows cache clearing without programming right