← Volver al buscador de CVEs

CVE-2026-28812

Apache JSPWiki

Descripción

UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.

CVSS 9.8EPSS 0.40299999999999997%Riesgo 1.02
Ver fuente
Publicación
2026-07-30 16:17:10
Versiones afectadas
<=2.12.3
Tipo
Aplicación web
Última modificación
2026-08-05 16:50:37
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H