Cross-site Request Forgery (CSRF)

Overview org.apache.jspwiki:jspwiki-main is a main release jar for Apache JSPWiki engine. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the AJAXPreview.jsp preview handler in jspwiki-war/src/main/webapp/templates/default/AJAXPreview.jsp and its caller...

Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2022-83597)

Apache JSPWiki is an open source WikiWiki engine built on Java, Servlet and JSP from the Apache Foundation USA.A security vulnerability exists in versions prior to Apache JSPWiki 2.11.3, which stems from a carefully crafted request on AJAXPreview.jsp that could trigger an XSS vulnerability.This...