Security Advisory

CVE-2021-44140

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-11-24 11:15:14

Last updated 2024-08-04 04:17:24

Assigner apache

State PUBLISHED

Description

Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later.

← Browse all CVEs View on cve.org ↗