Majkelstick

XWiki Platform allows unauthenticated access to read arbitrary server-side configuration files, such as `WEB-INF/xwiki.cfg`. This is possible through a Path Traversal issue, where an attacker can use leading slashes in the `resource` parameter to escape the intended directory. The issue is specifically exploitable via the `/bin/ssx/` and `/bin/jsx/` endpoints and has been confirmed on Tomcat deployments.

A file placement issue exists, allowing assets to be uploaded to unintended server directories. This is due to improper limitation of a pathname to a restricted directory, specifically in the asset upload functionality. This enables users to upload files outside of the intended temporary directory.