Description

A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Remediation

References

https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732

Related Vulnerabilities

CVE-2022-42468 Vulnerability in maven package org.apache.flume.flume-ng-sources:flume-jms-source

CVE-2023-29526 Vulnerability in maven package org.xwiki.platform:xwiki-platform-rendering-async-macro

CVE-2020-15096 Vulnerability in maven package org.webjars.npm:electron

CVE-2018-1000054 Vulnerability in maven package org.jvnet.hudson.plugins:ccm

CVE-2020-2243 Vulnerability in maven package org.jenkins-ci.plugins:vmanager-plugin

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Vendor Advisory