GitHub Advisoryadvisory · Maven

GHSA-4284-x26r-4hhc Cross Site Request Forgery in Apache JSPWiki

HIGH Published 2022-02-26 Modified 2022-03-07 Official page ↗
Aliases
CVE-2022-24947
Ecosystem
Maven
Packages
org.apache.jspwiki:jspwiki-main
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-352
Reviewed
2022-03-01

Affected packages

• Maven org.apache.jspwiki:jspwiki-main: < 2.11.2 → fixed in 2.11.2

Description

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.

Related

Alias · CVE (1)

  • CVE-2022-24947 Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References