Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-0225 · ADVISORY
• GitHub Advisory GHSA-pffw-p2q5-w6vh · ADVISORY
• jspwiki-wiki.apache.org/Wiki.jsp · WEB
• lists.apache.org/thread.html/03ddbcb1d6322e04734e65805a147a32bcfdb71b8fc5821fb046ba8d@%3Cannounce.apache.org%3E · WEB
• lists.apache.org/thread.html/4f19fdbd8b9c4caf6137a459d723f4ec60379b033ed69277eb4e0af9@%3Cuser.jspwiki.apache.org%3E · WEB
• lists.apache.org/thread.html/6251c06cb11e0b495066be73856592dbd7ed712487ef283d10972831@%3Cdev.jspwiki.apache.org%3E · WEB
• lists.apache.org/thread.html/aac253cfc33c0429b528e2fcbe82d3a42d742083c528f58d192dfd16@%3Ccommits.jspwiki.apache.org%3E · WEB
• lists.apache.org/thread.html/e42d6e93384d4a33e939989cd00ea2a06ccf1e7bb1e6bdd3bf5187c1@%3Ccommits.jspwiki.apache.org%3E

Lỗ hổng khác của org.apache.jspwiki:jspwiki-war

• CVE-2022-46907TRUNG BÌNH 6.1A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker …
• CVE-2019-12407TRUNG BÌNH 6.1On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki,…
• CVE-2019-10090TRUNG BÌNH 6.1On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki,…
• CVE-2019-12404TRUNG BÌNH 6.1On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki,…
• CVE-2019-10089TRUNG BÌNH 6.1On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki,…