Critical · published February 20, 2025
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
🚨 Guests can run arbitrary code with a single crafty request! This vulnerability in XWiki Platform’s SolrSearch lets anyone perform remote code execution without needing to log in. 🔥 Think of it as leaving your restaurant’s kitchen door wide open, allowing anyone to just walk in and whip up whatever dish they please. In the case of XWiki, a guest can send a spicy command that takes over the whole server! 🍽️ An attacker could gain full control over your XWiki installation, potentially reading, modifying, or deleting data at will. This means they could not only disrupt services but also expose sensitive information, leading to a devastating breach of confidentiality and integrity.
Think of it as leaving your restaurant’s kitchen door wide open, allowing anyone to just walk in and whip up whatever dish they please. In the case of XWiki, a guest can send a spicy command that takes over the whole server! 🍽️ This vulnerability leverages an insecure endpoint in the SolrSearch functionality, allowing an unauthenticated guest to execute Groovy code remotely. This is possible due to a lack of proper input validation and access controls in the application.
An attacker could gain full control over your XWiki installation, potentially reading, modifying, or deleting data at will. This means they could not only disrupt services but also expose sensitive information, leading to a devastating breach of confidentiality and integrity. To secure your instance, patch immediately to XWiki versions 15.10.11, 16.4.1, or 16.5.0RC1. If you cannot upgrade right away, modify the `Main.SolrSearchMacros` in `SolrSearchMacros.xml` to ensure it sets the content type to `application/xml`, preventing the execution of unfiltered commands. 🛡️ You've got this! Act fast, and you’ll keep your XWiki safe from unwanted guests! 💪✨