CVE-2022-24947

Apache JSPWiki CSRF Account Takeover

published February 25, 2022

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01160 · 66.9th percentile
Published
2022-02-25T08:30Z
EPSS history
Timeline
  • 25 FEB 08:30Z
    Apache JSPWiki CSRF Account Takeover
    cvelistv5