Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-36gf-vpj2-j42w

Опубликовано: 24 июн. 2024
Источник: github
Github: Прошло ревью
CVSS4: 5.3
CVSS3: 6.3

Описание

Cross site scripting in Apache JSPWiki

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.

Пакеты

Наименование

org.apache.jspwiki:jspwiki-main

maven
Затронутые версииВерсия исправления

< 2.12.2

2.12.2

EPSS

Процентиль: 97%
0.32325
Средний

5.3 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 1 года назад

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.

CVSS3: 6.1
nvd
больше 1 года назад

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.

CVSS3: 6.1
debian
больше 1 года назад

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the atta ...

EPSS

Процентиль: 97%
0.32325
Средний

5.3 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-79