Exploit for Code Injection in Xwiki

CVE-2025-24893 – Unauthenticated Remote Code Execution in XWik...

Exploit for Code Injection in Xwiki

XWiki CVE-2025-24893 Proof of Concept Authors: Net.Doge...

XWiki Platform SolrSearch Macro Remote Code Execution

XWiki Platform versions from 5.3-milestone-2 before 15.10.11 and from 16.0.0-rc-1 before 16.4.1 suffer from a Server-Side Template Injection SSTI due to the lack of sanitization of the SolrSearch Macro requests. By leveraging this vulnerability, a remote and unauthenticated attacker can achieve...

XWiki Platform 15.10.10 - Remote Code Execution

Exploit Title: XWiki Platform - Remote Code Execution Exploit Author: Al Baradi Joy Exploit Date: April 6, 2025 CVE ID: CVE-2025-24893 Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: Affected versions up to and including XWiki 15.10.10 Teste...

VulnCheck KEV: CVE-2025-24893

XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch...

CVE-2025-24893

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduc...

Vulnerability fixed in XWiki

XWiki has fixed a vulnerability in the system. The vulnerability is in the way XWiki handles the SolrSearch request. This allows a guest to execute arbitrary external code, compromising the confidentiality, integrity and availability of the system. The documentation provides specific steps for...

GHSA-RR6P-3PFG-562J XWiki Platform allows remote code execution as guest via SolrSearchMacros request

Impact Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to...

CVE-2025-24893

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduc...

CVE-2025-24893 Remote code execution as guest via SolrSearchMacros request in xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduc...

CVE-2025-24893

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to "SolrSearch". This impacts the confidentiality, integrity and availability of the whole XWiki installation. To...

CVE-2025-24893 Remote code execution as guest via SolrSearchMacros request in xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduc...

CVE-2025-24893 Remote code execution as guest via SolrSearchMacros request in xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduc...

CVE-2025-24893: Improper Neutralization of Directives in Dynamically Evaluated Code

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduc...

XWiki Platform security vulnerabilities

XWiki Platform is XWiki's open source suite of Wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform that originates from a request to SolrSearch by any guest user that can cause remote code execution...

io.nemesis.platform.module.search:nemesis-module-solrsearch (>=2.3.19.release, <=2.3.21.release) potentially affected by CVE-2025-24814 via org.apache.solr:solr-core (8.5.2)

org.apache.solr:solr-core MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - io.nemesis.platform.module.search:nemesis-module-solrsearch =2.3.19.release, =2.3.21.release Source cves:...

io.nemesis.platform.module.search:nemesis-module-solrsearch (>=2.3.19.release, <=2.3.21.release) potentially affected by CVE-2020-13957 via org.apache.solr:solr-core (8.5.2)

org.apache.solr:solr-core MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - io.nemesis.platform.module.search:nemesis-module-solrsearch =2.3.19.release, =2.3.21.release Source cves:...

io.nemesis.platform.module.search:nemesis-module-solrsearch (>=2.3.19.release, <=2.3.21.release) potentially affected by CVE-2020-13957 via org.apache.solr:solr-core (8.5.2)

org.apache.solr:solr-core MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - io.nemesis.platform.module.search:nemesis-module-solrsearch =2.3.19.release, =2.3.21.release Source cves:...

io.nemesis.platform.module.search:nemesis-module-solrsearch (>=2.3.19.release, <=2.3.21.release) potentially affected by CVE-2020-13957 via org.apache.solr:solr-core (8.5.2)

org.apache.solr:solr-core MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - io.nemesis.platform.module.search:nemesis-module-solrsearch =2.3.19.release, =2.3.21.release Source cves:...

udlseries.udlcenter.org XSS vulnerability

Open Bug Bounty ID: OBB-604205 Description| Value ---|--- Affected Website:| udlseries.udlcenter.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...