~ / search / GHSA-fmpq-w5q6-9vf9

GHSA-fmpq-w5q6-9vf9

Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-0224

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.jspwiki:jspwiki-main >= 2.9.0, < 2.11.0.M3 2.11.0.M3

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.

References

External links from the advisory. They lead to third-party sites.