Lucene search

K
githubGitHub Advisory DatabaseGHSA-36GF-VPJ2-J42W
HistoryJun 24, 2024 - 9:30 a.m.

Cross site scripting in Apache JSPWiki

2024-06-2409:30:53
CWE-79
GitHub Advisory Database
github.com
2
apache
jspwiki
cross site scripting

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim’s browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.

Affected configurations

Vulners
Node
org.apache.jspwiki\jspwikiMatchmain

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for GHSA-36GF-VPJ2-J42W