Lucene search
GoogleOSV:GHSA-8GW6-W5RW-4G5CHistoryNov 29, 2021 - 5:59 p.m.
Incorrect Default Permissions in Apache JSPWiki
2021-11-2917:59:24
Google
osv.dev
12
remote attack
file deletion
http request
security upgrade
software vulnerability
EPSS
0.005
Percentile
75.7%
Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later.
Related
cvelist
cvelist
CVE-2021-44140 Arbitrary file deletion on logout
2021-11-24 11:15:14
veracode
veracode
Privilege Escalation
2021-11-26 14:09:40
nvd
nvd
CVE-2021-44140
2021-11-24 12:15:07
cve
cve
CVE-2021-44140
2021-11-24 12:15:07
ubuntucve
ubuntucve
CVE-2021-44140
2021-11-24 00:00:00
osv
osv
CVE-2021-44140
2021-11-24 12:15:07
github
github
Incorrect Default Permissions in Apache JSPWiki
2021-11-29 17:59:24
prion
prion
Design/Logic Flaw
2021-11-24 12:15:00
openvas
openvas
Apache JSPWiki < 2.11.0 Multiple Vulnerabilities
2022-01-12 00:00:00