Jegatheesh A

Name of the Vulnerable Software and Affected Versions: Apache JSPWiki versions prior to 2.11.0.M4 Description: A carefully crafted plugin link invocation could trigger an issue related to the Page Revision History, allowing an attacker to execute javascript in the victim's browser and potentially obtain sensitive information about the victim. Recommendations: For versions prior to 2.11.0.M4, update to a version that contains a fix for this issue to prevent potential exploitation.

Name of the Vulnerable Software and Affected Versions: Apache JSPWiki versions prior to 2.11.0.M4 Description: A carefully crafted plugin link invocation could trigger an issue related to the WYSIWYG editor, allowing an attacker to execute javascript in the victim's browser and potentially obtain sensitive information about the victim. Recommendations: For versions prior to 2.11.0.M4, update to a version that contains a fix for this issue to prevent potential exploitation.

Name of the Vulnerable Software and Affected Versions: Apache JSPWiki versions 2.9.0 through 2.11.0.M3 Description: A malicious attachment could trigger an issue that could lead to session hijacking. Recommendations: For Apache JSPWiki versions 2.9.0 through 2.11.0.M3, update to a version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Apache JSPWiki versions 2.9.0 through 2.11.0.M3 Description: A carefully crafted InterWiki link could trigger an issue on the affected software, potentially leading to session hijacking. Recommendations: For Apache JSPWiki versions 2.9.0 through 2.11.0.M3, update to a version that contains a fix for this issue to prevent potential session hijacking.