Lucene search
GoogleOSV:CVE-2021-44140HistoryNov 24, 2021 - 12:15 p.m.
CVE-2021-44140
2021-11-2412:15:07
Google
osv.dev
5
cve-2021-44140
remote attackers
jspwiki 2.11.0
apache
file deletion
security vulnerability
Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later.
Related
osv
osv
Incorrect Default Permissions in Apache JSPWiki
2021-11-29 17:59:24
cvelist
cvelist
CVE-2021-44140 Arbitrary file deletion on logout
2021-11-24 11:15:14
veracode
veracode
Privilege Escalation
2021-11-26 14:09:40
nvd
nvd
CVE-2021-44140
2021-11-24 12:15:07
ubuntucve
ubuntucve
CVE-2021-44140
2021-11-24 00:00:00
github
github
Incorrect Default Permissions in Apache JSPWiki
2021-11-29 17:59:24
cve
cve
CVE-2021-44140
2021-11-24 12:15:07
prion
prion
Design/Logic Flaw
2021-11-24 12:15:00
openvas
openvas
Apache JSPWiki < 2.11.0 Multiple Vulnerabilities
2022-01-12 00:00:00