CVE-2022-24947

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 25/02/2022 Updated: 04/03/2022

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache jspwiki

Severity Critical Vendor The Apache Software Foundation Versions Affected Apache JSPWiki up to 2111 Description Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover Mitigation Apache JSPWiki users should upgrade to 2112 or later Installations mitigate the issue Credit This issue was dis ...

CWE-352 https://lists.apache.org/thread/txrgykjkpt80t57kzpbjo8kfrv8ss02c http://www.openwall.com/lists/oss-security/2022/02/25/1 https://nvd.nist.gov http://seclists.org/oss-sec/2022/q1/162

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-24947

Vulnerability Summary

Vulnerability Trend

Mailing Lists

References

Vulmon Search

About

Products

Connect