Description
XWiki 平台是一个通用的 wiki 平台，用户在构建应用程序提供运行时服务时。任何互联网用户都可以通过对 'SolrSearch'的请求来执行任意远程代码执行。这会影响整个 XWiki 安装的机密性、完整性和可用性。
XWiki SolrSearchMacros 远程代码执行漏洞复现（CVE-2025-24893）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/iSee857/CVE-2025-24893-PoC
https://cloud.tencent.com/developer/article/2549765
https://avd.aliyun.com/detail?id=AVD-2025-24893
https://www.offsec.com/blog/cve-2025-24893/
https://cve.imfht.com/detail/CVE-2025-24893
https://nvd.nist.gov/vuln/detail/CVE-2025-24893
https://www.ionix.io/blog/xwiki-remote-code-execution-vulnerability-cve-2025-24893/
https://gist.github.com/N3mes1s/332b90e5da00f44788c2c81ef0e7b98c
https://www.exploit-db.com/exploits/52136
https://www.rapid7.com/db/modules/exploit/multi/http/xwiki_unauth_rce_cve_2025_24893/
https://isc.sans.edu/diary/32444
https://www.vulncheck.com/blog/xwiki-cve-2025-24893-eitw