CVE-2026-28811

Description

References

• jspwiki-wiki.apache.org/Wiki.jsp · Vendor Advisory
• lists.apache.org/thread/2dm414zzjo3pvhjz6mvqy3b5yhvnkcg5 · Mailing List
• openwall.com/lists/oss-security/2026/07/30/14 · Mailing List

More vulnerabilities in jspwiki

• CVE-2026-48910MEDIUM 6.5A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the markdown renderer, whic…
• CVE-2026-28814HIGH 7.5Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored…
• CVE-2026-28813HIGH 8.8Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to vers…
• CVE-2026-28812CRITICAL 9.8UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are r…
• CVE-2025-24854MEDIUM 6.1A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to …