XWiki Standard 14.10 Remote Code Execution

XWiki Standard version 14.10 proof of concept remote code execution exploit. Exploit Title: CVE-2023-48292 Remote Code Execution Exploit Google Dork: N/A Date: 23 March 2025 Exploit Author: Mehran Seifalinia Vendor Homepage: https://www.xwiki.org/ Software Link:...

CVE-2023-48292

creationtimestamp| type| source ---|---|--- 2025-03-23 22:13:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/23452 2025-03-24 04:00:05+00:00| published-proof-of-concept| Telegram/w1bL0ZfQbZjC6kNLjY6qJg4sGK5mjn3UxkyFp-Fo5l10hpw 2025-03-29 12:26:01+00:00| seen|...

CVE-2023-48292

CVE-2023-48292 concerns the XWiki Admin Tools RunShellCommand feature. The issue is a cross-site request forgery (CSRF) in versions 4.4 up to 4.5.0/1 that lets an authenticated admin be tricked into executing shell commands on the server. An attacker can exploit this by injecting a command into a...