xwiki

PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1.

CVE-2025-24893 is a critical unauthenticated remote code execution vulnerability in XWiki (versions < 15.10.11, 16.4.1, 16.5.0RC1) caused by improper handling of Groovy expressions in the SolrSearch macro.

XWiki with Let's Encrypt Using Docker Compose

PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into RSS-based SolrSearch endpoints.

Wiki Service is responsible for establishing communication with XWiki, handling XWiki related logic and forwarding it to other services.

POC exploit for CVE-2025-24893

Le site internet de l'Atelier des Médias

mermaid render and editor for xwiki

Model Context Protocol server for openDesk, the sovereign workplace suite. Read-only access to its Nextcloud files, OpenProject work packages and XWiki pages.

Reusable ISO 9001 QMS deployment kit for XWiki/Redmine, Atlassian, and M365

An XWiki application that provides a page listing dead, non-URL links on your wiki.

An RCE vulnerability in XWiki was found allowing unauthenticated attackers to execute arbitrary Groovy code remotely without authentication or prior access.

setup XWiki on debian

Xwiki macro which displays information in short form first, while showing full details on mouse click. If multiple of these Expandable macros are arranged directly on top of each other, they form an accordion component.

XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName}

Este programa permite simplificar la creación de un árbol de directorios en XWiki usando el plugin de Tree Macro

Display weather information for a specific location

XWiki-Component, that's starts the main wiki and all subwikis after the start of the wiki

CVE-2025-24893 – XWiki SSTI unauthenticated RCE exploit (HackTheBox CTF)

Model Context Protocol server for XWiki. Read-only access to spaces, pages, search and attachments.