CVE-2026-28813

Опубликовано: 30 июл. 2026

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

Ссылки

https://lists.apache.org/thread/56440mymwkxt1hf3j8hjpo41yco7gotv
Mailing List
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/07/30/16
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*

Версия до 2.12.4 (исключая)

EPSS

Процентиль: 9%

0.0019

Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVE-2026-28813

CVSS3: 8.8

debian

20 дней назад

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which l ...

GHSA-59wm-6vhj-9fgr

CVSS3: 8.8

github

20 дней назад

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

EPSS

Процентиль: 9%

0.0019

Низкий

8.8 High

CVSS3

Дефекты

CWE-352