Vulnerabilities > CVE-2024-27136 - Unspecified vulnerability in Apache Jspwiki

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

apache

NVD

Published: 2024-06-24

Updated: 2024-11-21

Summary

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache Jspwiki 1.4.0 Apache Jspwiki 1.5.0 Apache Jspwiki 1.5.5 Apache Jspwiki 1.5.7 Apache Jspwiki 1.6.0 Apache Jspwiki 1.6.11 Apache Jspwiki 1.6.12 Apache Jspwiki 1.7.0 Apache Jspwiki 1.8.0 Apache Jspwiki 1.8.2 Apache Jspwiki 2.0.0 Apache Jspwiki 2.0.14 Apache Jspwiki 2.0.32 Apache Jspwiki 2.0.36 Apache Jspwiki 2.0.39 Apache Jspwiki 2.0.45 Apache Jspwiki 2.2.13 Apache Jspwiki 2.2.14 Apache Jspwiki 2.2.16 Apache Jspwiki 2.2.19 Apache Jspwiki 2.2.20 Apache Jspwiki 2.2.26 Apache Jspwiki 2.2.28 Apache Jspwiki 2.2.33 Apache Jspwiki 2.3.50 Apache Jspwiki 2.4.0 Apache Jspwiki 2.4.15 Apache Jspwiki 2.4.56 Apache Jspwiki 2.4.69 Apache Jspwiki 2.4.71 Apache Jspwiki 2.4.87 Apache Jspwiki 2.4.100 Apache Jspwiki 2.4.102 Apache Jspwiki 2.4.103 Apache Jspwiki 2.4.104 Apache Jspwiki 2.5.79 Apache Jspwiki 2.5.93 Apache Jspwiki 2.5.124 Apache Jspwiki 2.5.139 Apache Jspwiki 2.6.0 Apache Jspwiki 2.6.1 Apache Jspwiki 2.6.2 Apache Jspwiki 2.6.3 Apache Jspwiki 2.6.4 Apache Jspwiki 2.8.0 Apache Jspwiki 2.8.1 Apache Jspwiki 2.8.2 Apache Jspwiki 2.8.3 Apache Jspwiki 2.8.4 Apache Jspwiki 2.9.0 Apache Jspwiki 2.9.1 Apache Jspwiki 2.10.0 Apache Jspwiki 2.10.1 Apache Jspwiki 2.10.2 Apache Jspwiki 2.10.3 Apache Jspwiki 2.10.4 Apache Jspwiki 2.10.5 Apache Jspwiki 2.11.0 Apache Jspwiki 2.11.1 Apache Jspwiki 2.11.2 Apache Jspwiki 2.11.3	106

Summary

Vulnerable Configurations

References