CVE-2025-32429 | xwiki-platform up to 16.10.5/17.2.2 getdeleteddocuments.vm sql injection (GHSA-vr59-gm53-v7cq)

July 25, 2025 Yanac

A vulnerability has been found in xwiki-platform up to 16.10.5/17.2.2 and classified as critical. This vulnerability affects unknown code of the file getdeleteddocuments.vm. The manipulation leads to sql injection.

This vulnerability was named CVE-2025-32429. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More