CVE-2025-24893

XWiki Platform Eval Injection Vulnerability

Xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to `SolrSearch`. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to `…

20. Feb 2025

Ausgewertete Quellen

• Hersteller
  https://jira.xwiki.org/browse/XWIKI-22149
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24893
• CISA
  XWiki Platform Eval Injection Vulnerability
• NVD
  CVE-2025-24893
• GitHub
  https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rr6p-3pfg-562j