CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch

CVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki 0 Table of Contents 1. Summary 2. Vulnerability Details 3. Affected Versions 4. Proof-of-Concept 4.1 Building the payload 4.2 Manual exploitation 4.3 Automated python exploit 5. Mitigation 6. Credits & References 1 Summary CVE:...

XWiki SolrSearch Groovy RCE (CVE-2025-24893)

Exploits CVE-2025-24893 in XWiki Platform: unauthenticated Groovy execution via crafted text parameter on /bin/get/Main/SolrSearch. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki SolrSearch Groovy RCE CVE-2025-24893.""" import re import urllib.parse from kittysploit import from...

Exploit for Eval Injection in Xwiki

CVE-2025-24893 - XWiki SolrSearch SSTI to unauthenticated RCE...

XWiki Platform - Remote Code Execution Detection

Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity, and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 15.10.11, 16.4.1, and 16.5.0RC1. !/usr/bin/env python3 -- coding: utf-...

Exploit for Eval Injection in Xwiki

CVE-2025-24893 - XWiki Unauthenticated RCE Exploit POC ⚠️ U...

Exploit for Code Injection in Xwiki

CVE-2025-24893 Exploit de Execução Remota de Código RCE no X...

Exploit for Code Injection in Xwiki

CVE-2025-24893 — XWiki SSTI Remote Code Execution Overview...

Exploit for Code Injection in Xwiki

XWiki Platform Unauthenticated RCE Exploit Overview This s...

Exploit for Code Injection in Xwiki

Description: XWiki Platform is a generic wiki platform offering...

Exploit for Code Injection in Xwiki

Description: XWiki Platform is a generic wiki platform offering...

📄 XWiki Platform 15.10.10 Remote Command Execution

XWiki Platform version 15.10.10 suffers from a critical unauthenticated remote command execution vulnerability through the SolrSearch endpoint. The issue is patched in versions 15.10.11, 16.4.1, and 16.5.0RC1...

Exploit for Code Injection in Xwiki

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit for Reve...

About Remote Code Execution – XWiki Platform (CVE-2025-24893) vulnerability

About Remote Code Execution - XWiki Platform CVE-2025-24893 vulnerability. XWiki is a free and open-source wiki platform written in Java, with a strong focus on extensibility. It supports WYSIWYG visual editing, importing and exporting documents in OpenDocument format, adding annotations and tags...

XWiki Platform Eval Injection Vulnerability

XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch...

Exploit for Code Injection in Xwiki

CVE-2025-24893 - XWiki Remote Code Execution via SolrSearch SS...

Exploit for Code Injection in Xwiki

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Tem...

📄 XWiki Platform Remote Code Execution

This Metasploit module exploits a template injection vulnerability in the the XWiki Platform. XWiki includes a macro called SolrSearch defined in Main.SolrSearchMacros that enables full-text search through the embedded Solr engine. The vulnerability stems from the way this macro evaluates search...

Exploit for Code Injection in Xwiki

solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CV...

Exploit for Code Injection in Xwiki

CVE-2025-24893 - XWiki Unauthenticated Remote Code Execution...

Exploit for Code Injection in Xwiki

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC...