CVE-2026-28814

Description

References

• lists.apache.org/thread/8vv0311bvrrqxsyn913pcwf7pctyk52w · Mailing List
• openwall.com/lists/oss-security/2026/07/30/17 · Mailing List

More vulnerabilities in jspwiki

• CVE-2026-48910MEDIUM 6.5A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the markdown renderer, whic…
• CVE-2026-28813HIGH 8.8Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to vers…
• CVE-2026-28812CRITICAL 9.8UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are r…
• CVE-2026-28811HIGH 7.5Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which f…
• CVE-2025-24854MEDIUM 6.1A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to …