Cross site scripting in Apache JSPWiki

2024-06-2409:30:53

CWE-79

GitHub Advisory Database

github.com

apache

jspwiki

cross site scripting

AI Score

Confidence

High

JSON

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim’s browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.

Affected configurations

Vulners

Node

org.apache.jspwikijspwiki-mainRange<2.12.2

VendorProductVersionCPE
org.apache.jspwikijspwiki-main*cpe:2.3:a:org.apache.jspwiki:jspwiki-main:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
org.apache.jspwiki	jspwiki-main	*	cpe:2.3:a:org.apache.jspwiki:jspwiki-main::::::::

References

github.com/advisories/GHSA-36gf-vpj2-j42w

jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2024-27136

lists.apache.org/thread/gfms8gbncqqkj52p861b8fnsypwsl1d5

nvd.nist.gov/vuln/detail/CVE-2024-27136

AI Score

Confidence

High

JSON

Related for GHSA-36GF-VPJ2-J42W