PT-2023-15104
CVE-2022-46907
·
Published
2023-05-25
·
Updated
2023-06-01
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Apache JSPWiki versions prior to 2.12.0
Description
A carefully crafted request on several JSPWiki plugins could trigger an issue that allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Recommendations
For versions prior to 2.12.0, upgrade to 2.12.0 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾