CVE-2025-24893-XWiki-RCE

📜 Description

A critical RCE vulnerability exists in XWiki that allows unauthenticated attackers to execute arbitrary system commands via vulnerable API endpoints.
Exploitation can result in:

• Full server takeover
• Data theft or destruction
• Pivoting into internal networks

---

💥 Impact

• Complete compromise of the affected XWiki instance and underlying OS.
• Loss of confidentiality, integrity, and availability.

---

🛠 Fix / Mitigation

• Upgrade to the latest patched version (****).
• Restrict or disable vulnerable API endpoints.
• Apply WAF rules to block malicious payloads.

Exploitation:

SHODAN DORK : http.title:"XWiki"

Usage:

git clone https://github.com/Hex00-0x4/CVE-2025-24893-XWiki-RCE.git

cd CVE-2025-24893-XWiki-RCE

python3 CVE-2025-24893.py