Not rated
CVE-2019-10077 A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which…
Description
A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache JSPWiki | Versions not published |
References
- [jspwiki-commits] 20190519 [jspwiki-site] branch jbake updated: added CVE-2019-10076, CVE-2019-10077 and CVE-2019-10078 vulnerability disclosures lists.apache.org
- [oss-security] 20190519 [CVE-2019-10077] Apache JSPWiki Cross-site scripting vulnerability www.openwall.com
- jspwiki-wiki.apache.org jspwiki-wiki.apache.org
- 108437 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Apache JSPWiki
The 22 CVEs of Apache JSPWiki →
CVE-2026-48910
A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the…
Not rated
CVE-2026-28814
Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain…
Not rated
CVE-2026-28813
Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities
Not rated
CVE-2026-28812
UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate…
Not rated