Back to the CVE list
CVE-2025-24893 CISA KEV · Actively exploited

XWiki Platform Eval Injection Vulnerability

CVSS score

—

EPSS probability

%99.9

Risk score

—

Published

11 mo ago

OverviewPublic Exploits (13)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
MattiaCervelli/CVE-2025-24893_Analysis
GitHub

MattiaCervelli/CVE-2025-24893_Analysis

Public PoCSource updated: 19.08.2026 11:33:45
G
endusdksla/xwiki-cve-2025-24893
GitHub

endusdksla/xwiki-cve-2025-24893

Public PoCSource updated: 09.07.2026 16:12:41
G
Fomovet/cve-2025-24893
GitHub

POC for CVE-2025-24893

Public PoCSource updated: 21.06.2026 14:30:55
G
vasilysaint/CVE-2025-24893
GitHub

OSCP like CVE-2025-24893 exploit for Linux XWiki

Public PoCSource updated: 11.06.2026 21:22:12
G
hasecto/CVE-2025-24893
GitHub

Exploit de Execução Remota de Código (RCE) no XWiki

Public PoCSource updated: 29.05.2026 02:02:00
G
rippsec/CVE-2025-24893-XWiki-SSTI-RCE
GitHub

CVE-2025-24893 – XWiki SSTI unauthenticated RCE exploit (HackTheBox CTF)

Public PoCSource updated: 16.04.2026 01:18:29
G
Retro023/CVE-2025-24893-POC
GitHub

A POC for CVE-2025-24893 written in python

Public PoCSource updated: 26.01.2026 17:38:48
G
nohack1212/CVE-2025-24893-
GitHub

CVE-2025-24893 | Vulnérabilité d'exécution de code à distance sur la plateforme XWiki (preuve de concept)

Public PoCSource updated: 15.07.2026 17:56:31
G
TomKingori/xwiki-cve-2025-24893-exploit
GitHub

Unauthenticated RCE exploit for XWiki CVE-2025-24893 via Groovy script injection

Public PoCSource updated: 09.01.2026 21:17:39
G
ibadovulfat/CVE-2025-24893
GitHub

A critical remote code execution (RCE) vulnerability (CVE‑2025‑24893) exists in the XWiki Platform, specifically in the SolrSearch RSS feed endpoint.

Public PoCSource updated: 26.02.2026 16:29:12
E
XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)
Exploit-DB

XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)

Exploit referenceSource updated: 16.09.2025 00:00:00
E
XWiki Platform 15.10.10 - Remote Code Execution
Exploit-DB

XWiki Platform 15.10.10 - Remote Code Execution

Exploit referenceSource updated: 07.04.2025 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml
Nuclei

Nuclei: XWiki Platform - Remote Code Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-24893"