Reformat the repo to store all my PoCs and add CVE-2025-24893

2025-08-18 13:56:34 -06:00
parent 14c0141694
commit 9788148d65
5 changed files with 179 additions and 22 deletions
@@ -0,0 +1,11 @@
+# CVE-2025-24893 - XWiki RCE
+
+This vuln stems from improper user input sanitization when passing SolrSearch queries. Arbitrary groovy code can be executed due to a direct evaluate() call.
+
+The vulnerable endpoint here is:
+`/xwiki/bin/get/Main/SolrSearch?media=rss&text=`
+
+# License
+GPL v3.0 - as all good software should be
+
+Remember - don't be a skid :)