XWiki Platform - Remote Code Execution

Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity, and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 15.10.11, 16.4.1, and 16.5.0RC1. id: CVE-2025-24893 info: name: XWiki...

XWiki < 4.10.20 - Remote code execution

XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...

CVE-2025-24893-PoC

CVE-2025-24893-PoC Exploit XWiki RCE non autenticato Versioni XWiki interessate Versioni 15.10.11 Versioni 16.4.1 Versioni 16.5.0RC1 Descrizione della vulnerabilità Le versioni interessate di XWiki contengono una vulnerabilità di esecuzione di codice in remoto RCE causata da una gestione non sicu...

CVE-2025-24893

CVE-2025-24893 XWiki – Proof of Concept für nicht authentifizierte Remote-Codeausführung Beschreibung der Schwachstelle XWiki Platform ist eine generische Wiki-Plattform, die Laufzeitdienste für darauf aufbauende Anwendungen bereitstellt. Jeder Gast kann über eine Anfrage an SolrSearch beliebigen...

CVE-2025-24893-PoC

CVE-2025-24893 – Esecuzione Comandi Remota su XWiki Proof of Concept Panoramica Questo repository contiene un Proof of Concept PoC controllato per CVE-2025-24893 , una vulnerabilità di Esecuzione Comandi Remota RCE non autenticata che colpisce XWiki. La vulnerabilità consente a un attacker di...

cov-int

XWiki Commons XWiki Commons sono librerie tecniche comuni a diversi altri progetti XWiki di primo livello. Queste librerie possono essere utilizzate da progetti esterni all'ecosistema XWiki, sono generiche e non legate al dominio wiki. XWiki Platform, XWiki Commons e XWiki Rendering fanno parte...

GHSA-45PH-GXXR-GWGW XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing

Impact Any user who can edit a page in XWiki can use Live Data's edit REST API in XWiki to change the rights on that page. This allows the user to obtain script right on the page. Script right allows the user to execute potentially dangerous Velocity scripts and send unfiltered HTML and JavaScrip...

XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing

Impact Any user who can edit a page in XWiki can use Live Data's edit REST API in XWiki to change the rights on that page. This allows the user to obtain script right on the page. Script right allows the user to execute potentially dangerous Velocity scripts and send unfiltered HTML and JavaScrip...

Exploit for Eval Injection in Xwiki

CVE-2025-24893 - XWiki SolrSearch SSTI to unauthenticated RCE...

CVE-2026-48048

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the LiveTableResults, it is still possible to...

CVE-2026-48048

XWiki Platform is vulnerable due to an insufficient patch for GHSA-5cf8-vrr8-8hjm in the LiveTableResults endpoint. Affected versions are 6.2.1 and earlier than 18.0.0RC1, 17.10.13, 17.4.9, and 16.10.17. By sending slightly modified parameters to LiveTableResults, an attacker can reconstruct a us...

CVE-2026-48048 XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the LiveTableResults, it is still possible to...

CVE-2026-48047

XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, a potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar extension installed on the wiki to write...

CVE-2026-48047 XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin

XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, a potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar extension installed on the wiki to write...

CVE-2026-48047

Affected component: XWiki Platform WebJars API (org.xwiki.platform:xwiki-platform-webjars-api). Vulnerability: Path traversal that can let an attacker write arbitrary files (e.g., configuration files or superadmin password) after installing a malicious WebJar extension and publishing it to a conf...

CVE-2026-48047 XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin

XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, a potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar extension installed on the wiki to write...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70600 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70600 Source advisory: SNYK:JS-ELECTRON-18563354...

GHSA-QJ4X-9G63-25G6 XWiki Platform Old Core: Resource path traversal via /skin/ action endpoint in Jetty 12+

Impact With Jetty 12+ a user can craft a URL to access any resource the Jetty instance is allowed to access. For example http://host/xwiki/bin/skin/..%252f/..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd allows downloading the content of the /etc/passwd file, provided Jetty is allowed...

Remote Code Execution

com.xwiki.pro, xwiki-pro-macros is vulnerable to Remote Code Execution. The vulnerability is due to the excerpt-include macro improperly escaping the title of the included page and executing the excerpt content with the macro's privileges, which allows an attacker to inject XWiki syntax through a...

GHSA-W56X-9778-RPPX xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro

Summary The excerpt-include macro does not properly escape the title of the included page and executes the content of the excerpt with the macro's rights. Therefore, it is vulnerable to XWiki syntax injection via the included page's title and content, allowing remote code execution for any user w...