Cross-site Scripting in jspwiki-war

MÉDIO 6.1CVE-2018-20242 · GHSA-5q75-cxcq-wr26 · Published 11/02/2019 · updated 17/06/2026

Em resumo

CVE-2018-20242 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta org.apache.jspwiki:jspwiki-war, jspwiki (apache).
Chance de exploração nos próximos 30 dias (EPSS): 5.4%, maior que 92.7% das vulnerabilidades.
Correção: atualize para 2.11.0.M1 ou posterior.

Package	Affected versions	Patched versions
org.apache.jspwiki:jspwiki-war Maven	`< 2.11.0.M1`	`2.11.0.M1`
jspwiki apache	`≤ 2.10.5`	No fix yet

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.

NVD description

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.