A vulnerability has been found in xwiki-platform up to 16.4.6/16.10.2 and classified as problematic. This vulnerability affects unknown code of the component REST Endpoint. The manipulation leads to insertion of sensitive information into sent data.
This vulnerability was named CVE-2025-49584. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
