Apache Jspwiki
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_jspwiki:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Jspwiki (d2af978c-ebcc-5ceb-870e-09e63ae0dc46) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-24854 |
vulnerable | 2026-06-08 07:12:50.078386 |
Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin
A carefully crafted request using the Image plugin could trigger an XSS
vulnerability on Apache JSPWiki, which could allow the attacker to
execute javascript in the victim's browser and get some sensitive
information about the victim.
Apache JSPWiki users should upgrade to 2.12.3 or later.
Published: 2025-07-31T08:43:18.886Z
Updated: 2025-11-04T21:09:44.925Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24853 |
vulnerable | 2026-06-08 07:12:50.076874 |
Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing
A carefully crafted request when creating a header link using the
wiki markup syntax, which could allow the attacker to execute javascript
in the victim's browser and get some sensitive information about the
victim.
Further research by the JSPWiki team showed that the markdown parser allowed this kind of attack too.
Apache JSPWiki users should upgrade to 2.12.3 or later.
Published: 2025-07-31T08:42:06.453Z
Updated: 2025-11-04T21:09:43.620Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27136 |
vulnerable | 2026-06-08 06:31:27.687946 |
Apache JSPWiki: Cross-site scripting vulnerability on upload page
XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.
Published: 2024-06-24T07:44:30.732Z
Updated: 2025-03-20T18:03:19.410Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46907 |
vulnerable | 2026-06-08 05:50:39.739506 |
Apache JSPWiki: XSS Injection points in several plugins
A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.0 or later.
Published: 2023-05-25T06:58:18.912Z
Updated: 2025-02-13T16:33:58.435Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34158 |
vulnerable | 2026-06-08 05:44:52.236675 |
User Group Privilege Escalation
A carefully crafted invocation on the Image plugin could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow a group privilege escalation of the attacker's account. Further examination of this issue established that it could also be used to modify the email associated with the attacked account, and then a reset password request from the login page.
Published: 2022-08-04T06:16:11.000Z
Updated: 2024-08-03T08:16:17.225Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28732 |
vulnerable | 2026-06-08 05:42:45.698820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28731 |
vulnerable | 2026-06-08 05:42:45.698321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28730 |
vulnerable | 2026-06-08 05:42:45.697288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27166 |
vulnerable | 2026-06-08 05:41:54.856600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24948 |
vulnerable | 2026-06-08 05:41:44.978749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24947 |
vulnerable | 2026-06-08 05:41:44.977384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44140 |
vulnerable | 2026-06-08 05:36:44.970142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40369 |
vulnerable | 2026-06-08 05:35:17.860672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10078 |
vulnerable | 2026-06-08 05:12:22.112212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10077 |
vulnerable | 2026-06-08 05:12:22.111340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10076 |
vulnerable | 2026-06-08 05:12:22.106419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20242 |
vulnerable | 2026-06-08 05:11:26.891462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.