Cristian Borlovan

Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

**Name of the Vulnerable Software and Affected Versions** Apache JSPWiki versions prior to 2.11.2 **Description** The Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. **Recommendations** For versions prior to 2.11.2, upgrade to 2.11.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the user preferences form to minimize the risk of exploitation.