CVE-2024-31982 PoC — XWiki Platform: Remote code execution as guest via DatabaseSearch

Source

https://github.com/th3gokul/CVE-2024-31982

Associated Vulnerability

Title: XWiki Platform: Remote code execution as guest via DatabaseSearch (CVE-2024-31982)
Description:XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a closed wiki as the database search is by default accessible for all users. This impacts the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10RC1. As a workaround, one may manually apply the patch to the page `Main.DatabaseSearch`. Alternatively, unless database search is explicitly used by users, this page can be deleted as this is not the default search interface of XWiki.

Description

A tool for vulnerability detection and exploitation tool for CVE-2024-31982

Readme

# CVE-2024-31982
CVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-31982
### Installation
```bash
git clone https://github.com/th3gokul/CVE-2024-31982.git
cd CVE-2024-31982
pip install -r requirements.txt
python3 cvehunter.py --help
```
### Usage

```yaml
python3 cvehunter.py -h

  ____ __     __ _____  _   _                _               
 / ___|\ \   / /| ____|| | | | _   _  _ __  | |_   ___  _ __ 
| |     \ \ / / |  _|  | |_| || | | || '_ \ | __| / _ \| '__|
| |___   \ V /  | |___ |  _  || |_| || | | || |_ |  __/| |   
 \____|   \_/   |_____||_| |_| \__,_||_| |_| \__| \___||_| 
     CVE-2024-31982                      @th3gokul

[Description]: Vulnerability Detection and Exploitation
tool for CVE-2024-31982

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     [INF]: Specify a URL or domain
                        for vulnerability detection
  -l LIST, --list LIST  [INF]: Specify a list of URLs
                        for vulnerability detection
  -t THREADS, --threads THREADS
                        [INF]: Number of threads for
                        list of URLs
  -proxy PROXY, --proxy PROXY
                        [INF]: Proxy URL to send request
                        via your proxy
  -v, --verbose         [INF]: Increases verbosity of
                        output in console
  -o OUTPUT, --output OUTPUT
                        [INF]: Filename to save output
                        of vulnerable target]

```

### About
The tool is Developed  by [th3Gokul](https://www.linkedin.com/in/gokul-v-13455521a/) and [D.Sanjai Kumar](https://www.linkedin.com/in/d-sanjai-kumar-109a7227b/) Open Source tool developer at RevoltSecurities and the tool is developed for security reseachers and Ethical hackers to know more and exploit the CVE-2024-31982
### Disclaimer
The tool is only for education and ethical purpose only and Developers are not responsible for any illegal exploitations.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →