H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2025-10-30
Last seen2025-10-30

Confidence

—

XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.

Labels

exploitedkev

CISA KEV context

Vendor / productXWiki Platform
Added2025-10-30
Due date2025-11-20
2 recorded

Relationships

2 external

References

nvd
CVE-2025-24893
open
cwe
CWE-95
open