Описание
Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.
Ссылки
- Mailing ListVendor Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.12.4 (исключая)
cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.0041
Низкий
7.5 High
CVSS3
Дефекты
CWE-306
Связанные уязвимости
CVSS3: 7.5
debian
20 дней назад
Arbitrary Wiki Markup rendering due to lack of authentication in Apach ...
CVSS3: 7.5
github
20 дней назад
Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.
EPSS
Процентиль: 34%
0.0041
Низкий
7.5 High
CVSS3
Дефекты
CWE-306