Lucene search
Veracode Vulnerability DatabaseVERACODE:36604HistoryAug 05, 2022 - 4:01 a.m.
Cross-Site Request Forgery (CSRF)
2022-08-0504:01:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
cross-site request forgery
software vulnerability
userpreferences.jsp
EPSS
0.001
Percentile
27.3%
org.apache.jspwiki:jspwiki-builder is vulnerable to cross-site request forgery (CSRF). A remote attacker is able to trigger an CSRF attack on UserPreferences.jsp via sending a specifically crafted request to modify the email associated with the victim’s account and then a reset password request from the login page.
Related
ubuntucve
ubuntucve
CVE-2022-28731
2022-08-04 00:00:00
cve
cve
CVE-2022-28731
2022-08-04 07:15:07
nvd
nvd
CVE-2022-28731
2022-08-04 07:15:07
github
github
Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp
2022-08-05 00:00:30
cnvd
cnvd
Apache JSPWiki Cross-Site Request Forgery Vulnerability (CNVD-2022-76239)
2022-08-08 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-08-04 07:15:00
cvelist
cvelist
CVE-2022-28731 Apache JSPWiki CSRF in UserPreferences.jsp
2022-08-04 06:15:43
osv
osv
CVE-2022-28731
2022-08-04 07:15:07
Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp
2022-08-05 00:00:30
openvas
openvas
Apache JSPWiki < 2.11.3 Multiple Vulnerabilities
2022-08-05 00:00:00