A vulnerability classified as problematic was found in xwiki-platform up to 14.10.21/15.10.11/16.4.2/16.6.x. Affected by this vulnerability is an unknown functionality of the component REST Endpoint. The manipulation leads to missing authorization.
This vulnerability is known as CVE-2025-46554. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
