Security Advisory

CVE-2026-28812

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-30 15:52:34

Last updated 2026-07-31 15:28:08

Assigner apache

CVSS score not scored

State PUBLISHED

Description

UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.

← Browse all CVEs View on cve.org ↗