PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1.
-
Updated
Aug 22, 2025 - Python
#
cve-2025-24893
Here are 8 public repositories matching this topic...
CVE-2025-24893 is a critical unauthenticated remote code execution vulnerability in XWiki (versions < 15.10.11, 16.4.1, 16.5.0RC1) caused by improper handling of Groovy expressions in the SolrSearch macro.
-
Updated
Aug 4, 2025 - Python
PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into RSS-based SolrSearch endpoints.
proof-of-concept poc rce xwiki commandinjection cve-2025-24893 groovyinjection asyncrendering webappexploit
-
Updated
Sep 2, 2025 - Python
POC exploit for CVE-2025-24893
-
Updated
Aug 9, 2025 - Python
An RCE vulnerability in XWiki was found allowing unauthenticated attackers to execute arbitrary Groovy code remotely without authentication or prior access.
editor linux shell bash groovy tools kernel hack exploit rce xwiki ctfs zeroday hackthebox hacking-tools cve-2025-24893 xwiki-exploit cve-2025-24893-exploit
-
Updated
Nov 28, 2025 - Python
This vulnerability affects XWiki Platform versions >= 5.3-milestone-2 and = 16.0.0-rc-1 and Successful exploitation may result in the remote code execution under the privileges of the web server, potentially exposing sensitive data or disrupting survey operations.
linux shell bash groovy tools kernel hack exploit rce ctfs zeroday hackthebox hacking-tools cve-2025-24893 xwiki-exploit cve-2025-24893-exploit
-
Updated
Nov 28, 2025 - Python
PoC exploit for XWiki Remote Code Execution Vulnerability (CVE-2025-24893)
-
Updated
Aug 15, 2025 - Python
🛠️ Exploit remote code execution vulnerability in XWiki through SolrSearch, affecting the platform’s security and user data integrity.
linux shell bash groovy kernel hack proof-of-concept poc xwiki hackthebox hacking-tools remote-code-execution remote-command-execution rce-exploit cve-2025-24893 groovyinjection cve-2015-24893 cve-2025-24893-exploit
-
Updated
Dec 25, 2025 - Python
Improve this page
Add a description, image, and links to the cve-2025-24893 topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the cve-2025-24893 topic, visit your repo's landing page and select "manage topics."