PT-2019-11425 · Apache · Apache Jspwiki

Jegatheesh A · Published 2019-09-23 · Updated 2019-10-11 · CVE-2019-10087

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Apache JSPWiki versions prior to 2.11.0.M4

Description: A carefully crafted plugin link invocation could trigger an issue related to the Page Revision History, allowing an attacker to execute javascript in the victim's browser and potentially obtain sensitive information about the victim.

Recommendations: For versions prior to 2.11.0.M4, update to a version that contains a fix for this issue to prevent potential exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-10087

GHSA-GWFQ-QWMP-X9XG

Affected Products

Apache Jspwiki

References · 5

• https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10087 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10087 · Security Note
• https://osv.dev/vulnerability/CVE-2019-10087 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gwfq-qwmp-x9xg · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10087 · Note