Exploit for POC-for

kitploit · 2026-09-06

Description

POC tools for CVE-2025-24893 intended to assist with vulnerability remediation only.

Entry point

Parametertext · query param

Pathxwiki/bin/get/Main/SolrSearch?media=rss&text=PAYLOAD

XWiki SolrSearch SSTI/RCE via crafted Groovy injection in SolrSearch endpoint (unauthenticated).

Affected Xwiki versions

Xwiki< 15.10.11, 16.4.1, 5.3

All known vulnerabilities by product

CVSS 9.8 for CVE-2025-24893

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-09-06 05:00

Last Seen:2026-09-13 03:11

Reporter:KitPloit

Tags

CVE-2025-24893proof of conceptvulnerability remediationtools

Other exploits for CVE-2025-24893

2026-09-13 KitPloitKITPLOIT

CVE-2025-24893-PoC

2026-09-13 KitPloitKITPLOIT

2026-09-13 KitPloitKITPLOIT

2026-09-13 KitPloitKITPLOIT

CVE-2025-24893-PoC

2026-09-13 KitPloitKITPLOIT

2026-09-13 KitPloitKITPLOIT

2026-09-13 KitPloitKITPLOIT

CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch

2026-09-13 KitPloitKITPLOIT

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-X0DA6H-POC-FOR-CVE-2025-24893
Только для вспомогательного исправления уязвимостей, не используйте в других целях.