CVE-2022-24947

Опубликовано: 25 фев. 2022

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.

Ссылки

http://www.openwall.com/lists/oss-security/2022/02/25/1
Mailing List
Mitigation
Third Party Advisory
https://lists.apache.org/thread/txrgykjkpt80t57kzpbjo8kfrv8ss02c
Mailing List
Mitigation
Vendor Advisory
http://www.openwall.com/lists/oss-security/2022/02/25/1
Mailing List
Mitigation
Third Party Advisory
https://lists.apache.org/thread/txrgykjkpt80t57kzpbjo8kfrv8ss02c
Mailing List
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*

Версия до 2.11.2 (исключая)

EPSS

Процентиль: 83%

0.01846

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2022-24947

CVSS3: 8.8

ubuntu

почти 4 года назад

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.

CVE-2022-24947

CVSS3: 8.8

debian

почти 4 года назад

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, wh ...

GHSA-4284-x26r-4hhc

CVSS3: 8.8

github

почти 4 года назад

Cross Site Request Forgery in Apache JSPWiki

EPSS

Процентиль: 83%

0.01846

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352