CVE Watch—

CVE-2025-24893

XWiki Platform Eval Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

30 de out. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

XWiki / Platform

Vulnerabilidade

XWiki Platform Eval Injection Vulnerability

Adicionado ao KEV

30 de out. de 2025

Corrigir até

20 de nov. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rr6p-3pfg-562j ; https://nvd.nist.gov/vuln/detail/CVE-2025-24893

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.