A vulnerability classified as problematic has been found in xwiki-platform up to 15.10.15/16.4.6/16.10.1. Affected is an unknown function of the component XWiki.Notifications.Code.NotificationEmailRendererClass. The manipulation leads to privilege context switching error.
This vulnerability is traded as CVE-2025-49583. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
