Cross-site Scripting in jspwiki-war

MEDIO 6.1CVE-2018-20242 · GHSA-5q75-cxcq-wr26 · Published 11/02/2019 · updated 17/06/2026

In breve

CVE-2018-20242 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda org.apache.jspwiki:jspwiki-war, jspwiki (apache).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.4%, superiore al 92.6% delle vulnerabilità.
Correzione: aggiornare a 2.11.0.M1 o successiva.

Package	Affected versions	Patched versions
org.apache.jspwiki:jspwiki-war Maven	`< 2.11.0.M1`	`2.11.0.M1`
jspwiki apache	`≤ 2.10.5`	No fix yet

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.

NVD description

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.