GHSA-P2R4-RPJ8-M2P9 Cross-site Scripting in Apache JSPWiki

In Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-12407 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-12407 Source advisory: GHSA-P2R4-RPJ8-M2P9...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-12407 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-12407 Source advisory: OSV:GHSA-P2R4-RPJ8-M2P9...

Apache JSPWiki Cross-Site Request Forgery Vulnerability

JSPWiki is an open source JSP-based Wiki system from Apache, based on the file system, with rights management and search capabilities.Apache JSPWiki versions prior to 2.11.2 have a cross-site request forgery vulnerability in the user preference form. An attacker could use this vulnerability to...

Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2022-17019)

JSPWiki is an open source JSP-based Wiki system from Apache, based on the file system, with permissions management and search capabilities.Apache JSPWiki versions prior to 2.11.2 have a cross-site scripting vulnerability in the user preferences screen. An attacker could use this vulnerability to...

Cross-site Scripting (XSS)

Apache JSPWiki is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization on the user preference page via the UserName variable...

Cross-site Request Forgery (CSRF)

Apache JSPWiki is vulnerable to cross-site request forgery. A lack of secure password management to validate password change flow causes a vulnerability in user preferences form, allowing an attacker to trigger CSRF attacks which may lead to account takeover...

GHSA-9953-FMRW-V4VM Cross-site Scripting in Apache JSPWiki

A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users...

GHSA-4284-X26R-4HHC Cross Site Request Forgery in Apache JSPWiki

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.1) +5 more potentially affected by CVE-2022-24948 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.1 Source cves: CVE-2022-24948 Source advisory: OSV:GHSA-9953-FMRW-V4VM...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.1) +5 more potentially affected by CVE-2022-24947 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.1 Source cves: CVE-2022-24947 Source advisory: GHSA-4284-X26R-4HHC...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.1) +5 more potentially affected by CVE-2022-24948 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.1 Source cves: CVE-2022-24948 Source advisory: GHSA-9953-FMRW-V4VM...

Cross-site Scripting in Apache JSPWiki

A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.1) +5 more potentially affected by CVE-2022-24947 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.1 Source cves: CVE-2022-24947 Source advisory: OSV:GHSA-4284-X26R-4HHC...

Cross Site Request Forgery in Apache JSPWiki

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later...

CVE-2022-24948

A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users...

CVE-2022-24948

A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users...

CVE-2022-24947

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later...

CVE-2022-24947

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later...

CVE-2022-24947

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later...