{"id":"CVE-2025-32429","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-32429","generatedAt":"2026-10-28T04:34:16.982Z","title":"In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm.","description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. This is fixed in versions 16.10.6 and 17.3.0-rc-1.","published":"2025-07-24T23:15:26.000Z","lastModified":"2026-06-17T09:11:59.000Z","status":"Analyzed","sourceIdentifier":"security-advisories@github.com","cvss":{"version":"4.0","score":9.3,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-89"],"affected":["xwiki/xwiki"],"epss":{"score":0.85496,"percentile":0.9972,"date":"2026-10-27","history":[{"date":"2026-09-23","score":0.86982,"percentile":0.99739},{"date":"2026-10-25","score":0.85496,"percentile":0.99719}]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2025-07-28","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":52384,"kind":"exploit","title":"XWiki 14 - SQL Injection via getdeleteddocuments.vm","url":"https://www.exploit-db.com/exploits/52384","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52384.c","file":"exploits/multiple/webapps/52384.c","published":"2025-07-28","added":"2025-07-28","updated":"2025-07-28","author":"Byte Reaper","type":"webapps","platform":"multiple","port":null,"verified":false,"codes":["CVE-2025-32429"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 85.5%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://github.com/xwiki/xwiki-platform/commit/dfd0744e9c18d24ac66a0d261dc6cafd1c209101","tags":["Patch"],"source":"security-advisories@github.com"},{"url":"https://github.com/xwiki/xwiki-platform/commit/f502b5d5fd36284a50890ad26d168b7d8dc80bd3","tags":["Patch"],"source":"security-advisories@github.com"},{"url":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vr59-gm53-v7cq","tags":["Vendor Advisory"],"source":"security-advisories@github.com"},{"url":"https://jira.xwiki.org/browse/XWIKI-23093","tags":["Issue Tracking","Vendor Advisory"],"source":"security-advisories@github.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-32429","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}