Lucene search
Veracode Vulnerability DatabaseVERACODE:20305HistoryMay 21, 2019 - 8:22 a.m.
Cross-Site Scripting (XSS)
2019-05-2108:22:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.004 Low
EPSS
Percentile
75.1%
Apache JSPWiki is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into a victim’s browser via a malicious InterWiki link to steal session tokens or perform unwanted actions on behalf of the user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache jspwiki main jar | le | 2.11.0.M3 | |
| apache jspwiki main jar | le | 2.11.0.M3 |
Related
prion
prion
Cross site scripting
2019-05-20 21:29:00
osv
osv
CVE-2019-10077
2019-05-20 21:29:00
Cross-site Scripting in JSPWiki
2019-06-06 15:29:25
github
github
Cross-site Scripting in JSPWiki
2019-06-06 15:29:25
ubuntucve
ubuntucve
CVE-2019-10077
2019-05-20 00:00:00
cve
cve
CVE-2019-10077
2019-05-20 21:29:00
cvelist
cvelist
CVE-2019-10077
2019-05-20 20:46:15
nvd
nvd
CVE-2019-10077
2019-05-20 21:29:00
openvas
openvas
Apache JSPWiki < 2.11.0.M4 Multiple Vulnerabilities
2022-01-12 00:00:00