PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1.
-
Updated
Aug 22, 2025 - Python
#
xwiki
Here are 37 public repositories matching this topic...
CVE-2025-24893 is a critical unauthenticated remote code execution vulnerability in XWiki (versions < 15.10.11, 16.4.1, 16.5.0RC1) caused by improper handling of Groovy expressions in the SolrSearch macro.
-
Updated
Aug 4, 2025 - Python
XWiki with Let's Encrypt Using Docker Compose
letsencrypt docker productivity yaml dockerfile documentation devops wiki docker-compose docker-container containers healthcheck docker-registry docker-hub traefik xwiki letsencrypt-certificates xwiki-tree-macro xwiki-mermaid notion-alternative
-
Updated
Sep 19, 2026 - Shell
PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into RSS-based SolrSearch endpoints.
proof-of-concept poc rce xwiki commandinjection cve-2025-24893 groovyinjection asyncrendering webappexploit
-
Updated
Sep 2, 2025 - Python
Wiki Service is responsible for establishing communication with XWiki, handling XWiki related logic and forwarding it to other services.
-
Updated
Jun 29, 2019 - Java
POC exploit for CVE-2025-24893
-
Updated
Aug 9, 2025 - Python
Le site internet de l'Atelier des Médias
-
Updated
Sep 17, 2026 - SCSS
Model Context Protocol server for openDesk, the sovereign workplace suite. Read-only access to its Nextcloud files, OpenProject work packages and XWiki pages.
mcp matrix nextcloud caldav imap openproject xwiki open-xchange opendesk model-context-protocol zendis
-
Updated
Sep 1, 2026 - TypeScript
An RCE vulnerability in XWiki was found allowing unauthenticated attackers to execute arbitrary Groovy code remotely without authentication or prior access.
editor linux shell bash groovy tools kernel hack exploit rce xwiki ctfs zeroday hackthebox hacking-tools cve-2025-24893 xwiki-exploit cve-2025-24893-exploit
-
Updated
Nov 28, 2025 - Python
XWiki is a professional wiki
java wiki wiki-editor wiki-pages xwiki wiki-documentation jelastic wiki-macro jps wiki-site jelastic-jps
-
Updated
Jun 3, 2025
Este programa permite simplificar la creación de un árbol de directorios en XWiki usando el plugin de Tree Macro
-
Updated
Jan 13, 2024 - Java
XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName}
-
Updated
May 25, 2026 - Python
A Bash script to convert XWiki HTML exports into an Obsidian-compatible Markdown vault
-
Updated
May 2, 2026 - Shell
Xwiki macro which displays information in short form first, while showing full details on mouse click. If multiple of these Expandable macros are arranged directly on top of each other, they form an accordion component.
-
Updated
Nov 10, 2025 - JavaScript
Add this topic to your repo
To associate your repository with the xwiki topic, visit your repo's landing page and select "manage topics."