CVE-2019-0224

CVE-2019-0224: vulnerability in Apache JSPWiki

Published · Updated

Follow this CVE+ Monitor Apache JSPWiki+ Monitor org.apache.jspwiki:jspwiki-main

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.1%
In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.
Affected products
Apache · Apache JSPWiki
Related CVEs — Apache JSPWiki

In the same product, most dangerous first.

CVE-2019-0225—CVE-2019-0225EPSS 10.0%