Jspwiki

jspwiki

Vendor: Apache • 24 CVEs

CVEs (24)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-10076 1Apache 1Jspwiki Jun 17, 2026 May 20, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
CVE-2019-0225 1Apache 1Jspwiki Jun 17, 2026 Mar 28, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.
CVE-2019-0224 1Apache 1Jspwiki Jun 17, 2026 Mar 28, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute...Show more In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.Show less
CVE-2018-20242 1Apache 1Jspwiki Nov 21, 2024 Feb 11, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.