CVE-2019-12407 | BDVDB-2026-123045 Detail

Apache JSPWiki

Description#

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12407

Exploit#

No public exploit known

History#

Version 12019-09-23Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.