apache__jspwiki_CVE-2019-10076_2-11-0-M3

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

Apache JSPWiki < 2.11.0.M4 Multiple Vulnerabilities

Apache JSPWiki is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m3), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m3) +7 more potentially affected by CVE-2019-10076 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m3)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10076 Source advisory: OSV:GHSA-CXX2-FP39-RF3R...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m3), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m3) +1 more potentially affected by CVE-2019-10076 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m3)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m3 Source cves: CVE-2019-10076 Source advisory: GHSA-CXX2-FP39-RF3R...

CVE-2019-10076

A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m3), org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.11.0.m3) +1 more potentially affected by CVE-2019-10076 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m3)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m3 Source cves: CVE-2019-10076 Source advisory: MEND:CVE-2019-10076...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m3), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m3) +7 more potentially affected by CVE-2019-10076 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m3)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10076 Source advisory: MEND:CVE-2019-10076...

CVE-2019-10076

CVE-2019-10076 affects Apache JSPWiki 2.9.0 through 2.11.0.M3 and is described as a cross-site scripting (XSS) vulnerability triggered by a carefully crafted malicious attachment, potentially leading to session hijacking. The connected documents consistently reference the same affected product/ve...