Apache Jspwiki
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_jspwiki:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Jspwiki (d2af978c-ebcc-5ceb-870e-09e63ae0dc46) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-48910 |
vulnerable | 2026-09-16 04:33:04.144681 |
Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing
A carefully crafted editing request could trigger an XSS vulnerability
on Apache JSPWiki when parsing errors on the markdown renderer, which
could allow the attacker to execute javascript in the victim's browser
and get some sensitive information about the victim.
This issue affects Apache JSPWiki: through 2.12.3.
Users are recommended to upgrade to version 2.12.4, which fixes the issue.
Published: 2026-07-30T15:56:33.613Z
Updated: 2026-07-30T16:37:15.693Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28813 |
vulnerable | 2026-09-16 04:32:42.274258 |
Apache JSPWiki: JSPWiki vulnerable to JSON hijacking
Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities.
Users are recommended to upgrade to version 2.12.4, which fixes this issue.
Published: 2026-07-30T15:54:19.667Z
Updated: 2026-07-31T11:34:33.218Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28812 |
vulnerable | 2026-09-16 04:32:41.781147 |
Apache JSPWiki: UserManager does not sanity-check user database at startup
UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges.
Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.
Published: 2026-07-30T15:52:34.172Z
Updated: 2026-07-31T15:28:08.984Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28814 |
vulnerable | 2026-09-16 04:32:41.431516 |
Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering
Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables.
Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.
Published: 2026-07-30T15:55:28.034Z
Updated: 2026-07-31T17:55:59.734Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28811 |
vulnerable | 2026-09-16 04:32:41.204495 |
Apache JSPWiki: Error Handling - Reveals Error Details
Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3.
Users are recommended to upgrade to version 2.12.4, which fixes this issue.
Published: 2026-07-30T15:51:27.131Z
Updated: 2026-07-31T17:54:14.250Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24854 |
vulnerable | 2026-06-08 07:12:50.078386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24853 |
vulnerable | 2026-06-08 07:12:50.076874 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27136 |
vulnerable | 2026-06-08 06:31:27.687946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46907 |
vulnerable | 2026-06-08 05:50:39.739506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34158 |
vulnerable | 2026-06-08 05:44:52.236675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28732 |
vulnerable | 2026-06-08 05:42:45.698820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28731 |
vulnerable | 2026-06-08 05:42:45.698321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28730 |
vulnerable | 2026-06-08 05:42:45.697288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27166 |
vulnerable | 2026-06-08 05:41:54.856600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24948 |
vulnerable | 2026-06-08 05:41:44.978749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24947 |
vulnerable | 2026-06-08 05:41:44.977384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44140 |
vulnerable | 2026-06-08 05:36:44.970142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40369 |
vulnerable | 2026-06-08 05:35:17.860672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10078 |
vulnerable | 2026-06-08 05:12:22.112212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10077 |
vulnerable | 2026-06-08 05:12:22.111340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10076 |
vulnerable | 2026-06-08 05:12:22.106419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20242 |
vulnerable | 2026-06-08 05:11:26.891462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.