CVE-2019-12404

6.1MEDIUM

Key Information:

Vendor
Apache
Status
Apache Jspwiki
Vendor
CVE Published:
23 September 2019

Summary

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Affected Version(s)

Apache JSPWiki Apache JSPWiki up to 2.11.0.M4

References

https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12404
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.