CVE-2022-28732

🗓️ 04 Aug 2022 06:15:57Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 77 Views

A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, enabling attacker to execute javascript. Apache JSPWiki users should upgrade to 2.11.3 or later

Reporter	Title	Published	Views	Family All 43
ATTACKERKB	CVE-2022-28731	4 Aug 202207:15	–	attackerkb
ATTACKERKB	CVE-2022-28732	4 Aug 202207:15	–	attackerkb
Circl	CVE-2022-28732	4 Aug 202212:19	–	circl
CNNVD	Apache JSPWiki 跨站脚本漏洞	4 Aug 202200:00	–	cnnvd
CNNVD	Apache JSPWiki 跨站脚本漏洞	4 Aug 202200:00	–	cnnvd
CNNVD	Apache JSPWiki 跨站脚本漏洞	4 Aug 202200:00	–	cnnvd
CNNVD	Apache JSPWiki 跨站请求伪造漏洞	4 Aug 202200:00	–	cnnvd
CNVD	Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2022-83598)	8 Aug 202200:00	–	cnvd
Cvelist	CVE-2022-28732 Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin	4 Aug 202206:15	–	cvelist
EUVD	EUVD-2022-6460	3 Oct 202520:07	–	euvd

NVD

Vulners

Node

apache jspwikiRange<2.11.3

[
  {
    "product": "Apache JSPWiki",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "Apache JSPWiki up to 2.11.2",
        "status": "affected",
        "version": "Apache JSPWiki",
        "versionType": "custom"
      }
    ]
  }
]