PT-2026-66515 · Apache · Apache Jspwiki

CVE-2026-28814

·

Published

2026-07-30

·

Updated

2026-07-30

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-28814

Affected Products

Apache Jspwiki