Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Apache JSPWiki 2.12.4 Clear all filters
TI-2026-23008 CVE-2026-28814 · GHSA-9c4x-gmwm-cj68

Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering

Priority MEDIUM 40

Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00657 Published 2026-07-30 Fixed in 2.12.4 CWE-306
TI-2026-23007 CVE-2026-28813 · GHSA-59wm-6vhj-9fgr

Apache JSPWiki: JSPWiki vulnerable to JSON hijacking

Priority MEDIUM 40

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0027 Published 2026-07-30 Fixed in 2.12.4 CWE-352