Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-72ww-4rcw-mc62

Опубликовано: 31 июл. 2025
Источник: github
Github: Прошло ревью
CVSS4: 6.9

Описание

Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Apache JSPWiki users should upgrade to 2.12.3 or later.

Пакеты

Наименование

org.apache.jspwiki:jspwiki-main

maven
Затронутые версииВерсия исправления

< 2.12.3

2.12.3

EPSS

Процентиль: 40%
0.00185
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
6 месяцев назад

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.3 or later.

CVSS3: 6.1
nvd
6 месяцев назад

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.3 or later.

CVSS3: 6.1
debian
6 месяцев назад

A carefully crafted request using the Image plugin could trigger an XS ...

EPSS

Процентиль: 40%
0.00185
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-79