Popis
A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the markdown renderer, which could allow the attacker to execute javascript in the victim-s browser and get some sensitive information about the victim. This issue affects Apache JSPWiki: through 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes the issue.
CVSS 6.5EPSS 0.348%Riziko 0.67
Zobraziť zdroj- Zverejnené
- 2026-07-30 16:17:12
- Dotknuté verzie
- <2.12.4
- Typ
- Webová aplikácia
- Posledná úprava
- 2026-08-05 16:49:17
- Vektor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N