~ / search / GHSA-4284-x26r-4hhc

GHSA-4284-x26r-4hhc

Cross Site Request Forgery in Apache JSPWiki

Source: GitHub Advisory Database (reviewed) High CVE-2022-24947

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.jspwiki:jspwiki-main < 2.11.2 2.11.2

Details

As written in the advisory (Markdown source, shown as plain text).

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.

References

External links from the advisory. They lead to third-party sites.