Lucene search
Veracode Vulnerability DatabaseVERACODE:21554HistorySep 23, 2019 - 7:25 a.m.
Cross-Site Scripting (XSS)
2019-09-2307:25:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
55.9%
jspwiki-war is vulnerable to cross-site scripting (XSS). The remember parameter in preview.jsp was not handled properly to escape malicious script injection, allowing to trigger the attack through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache jspwiki main war | le | 2.11.0.M4 |
Related
cvelist
cvelist
CVE-2019-12407
2019-09-23 15:40:59
osv
osv
Cross-site Scripting in Apache JSPWiki
2022-05-24 16:56:40
CVE-2019-12407
2019-09-23 16:15:14
github
github
Cross-site Scripting in Apache JSPWiki
2022-05-24 16:56:40
cve
cve
CVE-2019-12407
2019-09-23 16:15:14
ubuntucve
ubuntucve
CVE-2019-12407
2019-09-23 00:00:00
prion
prion
Information disclosure
2019-09-23 16:15:00
nvd
nvd
CVE-2019-12407
2019-09-23 16:15:14
openvas
openvas
Apache JSPWiki < 2.11.0.M5 Multiple Vulnerabilities
2022-01-12 00:00:00