CVE-2025-24893

Bash POC script for RCE vulnerability in XWiki Platform

Example usage:

Setup a netcat listener:

$ nc -nvlp <Port>

Then run the script:

$ chmod +x cve.sh
$ ./cve.sh <Target URL> <Listener IP> <Port>

Affected versions:

• From 5.4 up to 15.10.11
• From 16.0.0 up to 16.4.1

Disclamer

This tool is for educational purposes only. I hold no responsibility for any misuse.