About Remote Code Execution – XWiki Platform (CVE-2024-31982) vulnerability

About Remote Code Execution - XWiki Platform CVE-2024-31982 vulnerability. XWiki is a free open-source wiki platform. Its main feature is simplified extensibility. XWiki is often used in corporate environments as a replacement for commercial Wiki solutions such as Atlassian Confluence. A...

CVE-2024-31982

creationtimestamp| type| source ---|---|--- 2024-06-22 21:25:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7744 2024-06-23 17:48:29+00:00| published-proof-of-concept| https://t.me/CNArsenal/2703 2024-06-23 17:48:56+00:00| published-proof-of-concept|...

Exploit for Code Injection in Xwiki

CVE-2024-31982 PoC and Bulk Scanner !Bannerscreens/scree...

Exploit for Code Injection in Xwiki

CVE-2024-31982 CVEHunter tool for vulnerability detection and...

CVE-2024-31982

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a close...