CVE-2024-31982

This repository contains a functional Python script that exploits CVE-2024-31982, a remote code execution vulnerability in XWiki Platform versions greater than 14.10.20. The exploit sends a crafted HTTP request to trigger Groovy code execution via the DatabaseSearch endpoint.

This repository contains a functional Python script that exploits CVE-2024-31982, a Java SSTI vulnerability in XWiki leading to RCE. The exploit sends a crafted HTTP request with a Groovy payload to trigger remote code execution.

This repository contains a functional proof-of-concept exploit for CVE-2024-31982, which targets an unauthenticated remote code execution vulnerability in XWiki. The exploit crafts a malicious payload using Groovy script injection via the SolrSearch endpoint to establish a reverse shell.

This repository contains a functional exploit for CVE-2024-31982, targeting XWiki. The exploit leverages a Groovy script injection vulnerability to achieve remote code execution (RCE) by crafting a malicious URL with an async Groovy payload.

The repository contains a functional exploit tool for CVE-2024-31982, which targets a vulnerability in XWiki. The exploit sends a crafted request to trigger a Groovy script injection, demonstrating the vulnerability by printing a specific string in the response title.

This repository contains a functional Python script that exploits CVE-2024-31982, a Java SSTI vulnerability in XWiki leading to RCE. The exploit sends a crafted HTTP GET request with a Groovy payload to trigger the vulnerability.