CVE-2019-0224

In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session

published March 28, 2019

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05150 · 92.4th percentile
Published
2019-03-28T21:00Z
EPSS history
Timeline
  • 28 MAR 21:00Z
    In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session
    cvelistv5