Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-24854

Опубликовано: 31 июл. 2025
Источник: debian
EPSS Низкий

Описание

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.3 or later.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
jspwikiremovedpackage

EPSS

Процентиль: 40%
0.00185
Низкий

Связанные уязвимости

CVSS3: 6.1
ubuntu
6 месяцев назад

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.3 or later.

CVSS3: 6.1
nvd
6 месяцев назад

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.3 or later.

github
6 месяцев назад

Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin

EPSS

Процентиль: 40%
0.00185
Низкий