CVE-2019-10076

2019-05-2020:31:41

apache

www.cve.org

0.004 Low

EPSS

Percentile

75.1%

JSON

A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.

CNA Affected

[
  {
    "product": "Apache JSPWiki",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache JSPWiki 2.9.0 to 2.11.0.M3"
      }
    ]
  }
]