CVE-2025-32429

XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. This is fixed in versions 16.10.6 and 17.3.0-rc-1.

Affected

xwiki · xwiki-platform

CVSS v4.0 GITHUB

9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v4.0 GitHub

9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

87.90% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical · CWE-89

Published

2025-07-24

Updated

2025-07-25

Proof-of-concept exploits (2)

• amir-othman/CVE-2025-324290★ · 2025-07-26
• byteReaper77/CVE-2025-3242910★ · 2025-07-26

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32429.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52384

Security advisories

• xwiki/xwiki-platform/security/advisories/GHSA-vr59-gm53-v7cq
• https://jira.xwiki.org/browse/XWIKI-23093
• advisories/GHSA-vr59-gm53-v7cq
• xwiki/xwiki-platform/commit/dfd0744e9c18d24ac66a0d261dc6cafd1c209101

References

• CVE Record
• NVD entry

Related

• CVE-2022-0847
• CVE-2024-4577
• CVE-2025-10046
• CVE-2025-11077
• CVE-2025-2783
• CVE-2025-36041