CVE-2022-28730

A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This vulnerability leverages CVE-2021-40369, where the Denounce...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.2), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.2) +5 more potentially affected by CVE-2021-40369 +1 more via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.2 Source cves: CVE-2021-40369, CVE-2022-28730 Source advisory: GHSA-GGJQ-8C4C-68R5...

CVE-2022-28730

A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This vulnerability leverages CVE-2021-40369, where the Denounce...

CVE-2022-28730 Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp

A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This vulnerability leverages CVE-2021-40369, where the Denounce...

CVE-2022-28730 Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp

A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This vulnerability leverages CVE-2021-40369, where the Denounce...

CVE-2022-28730

CVE-2022-28730 describes an XSS in Apache JSPWiki triggered by a crafted request on AJAXPreview.jsp, enabling execution of arbitrary JavaScript in the victim’s browser and exposure of sensitive information. The issue builds on CVE-2021-40369, where the Denounce plugin incorrectly renders user-sup...