CVE-2025-24893 1

Vulnerability (CVE)

CVE-2025-24893: XWiki Platform Eval Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 30, 2025

XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.

Vulnerabilities & Patching