Beveiligingsadvies

CVE-2019-10078

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-05-20 20:50:54

Laatst bijgewerkt 2024-08-04 22:10:09

Toegewezen door apache

CVSS-score geen score

Status PUBLISHED

Beschrijving

A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable.

← Alle CVE's bekijken Bekijk op cve.org ↗