CVE-2019-12407: XSS
In Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Other sources
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Apache JSPWiki vulnerability?
The vulnerability ID for this Apache JSPWiki vulnerability is CVE-2019-12407.
What is the severity of CVE-2019-12407?
The severity of CVE-2019-12407 is medium with a CVSS score of 6.1.
How can an attacker exploit the CVE-2019-12407 vulnerability?
An attacker can exploit the CVE-2019-12407 vulnerability by crafting a plugin link invocation that triggers an XSS vulnerability on Apache JSPWiki.
Which versions of Apache JSPWiki are affected by CVE-2019-12407?
Apache JSPWiki up to version 2.11.0.M4 is affected by the CVE-2019-12407 vulnerability.
How can I fix the CVE-2019-12407 vulnerability?
To fix the CVE-2019-12407 vulnerability, update Apache JSPWiki to version 2.11.0.M5 or later.