PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into RSS-based SolrSearch endpoints.
proof-of-concept poc rce xwiki commandinjection cve-2025-24893 groovyinjection asyncrendering webappexploit
-
Updated
Aug 4, 2025 - Python