asyncrendering

Here is 1 public repository matching this topic...

Infinit3i / CVE-2025-24893

PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into RSS-based SolrSearch endpoints.

proof-of-concept poc rce xwiki commandinjection cve-2025-24893 groovyinjection asyncrendering webappexploit

Updated Sep 2, 2025
Python

Add this topic to your repo

To associate your repository with the asyncrendering topic, visit your repo's landing page and select "manage topics."

Learn more