CVE-2025-24893 PoC — XWiki Platform 安全漏洞

Description

XWiki Remote Code Execution (CVE-2025-24893) PoC 

介绍

# CVE-2024-4577

XWiki is a generic wiki platform offering runtime services for applications built on top of it. Not authenticated guest user can perform arbitrary remote code execution through a request to the `SolrSearch` end point.

# Usage

```
usage:  CVE-2025-24893.py [-h] [-v] URL COMMAND

XWiki SolrSearchMacros Remote Code Execution (CVE-2025-24893) PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-24893

positional arguments:
  URL            target address
  COMMAND        command to execute e.g. Runtime.getRuntime().exec('calc')

optional arguments:
  -h, --help     show this help message and exit
  -v, --version  show program's version number and exit
```

文件快照

备注