CoreCVE
Back

MEDIUM

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim

Published Sep 23, 2019

Description

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apache
Published Sep 23, 2019
Updated Aug 4, 2024
Reserved May 28, 2019
Link CVE-2019-12407
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-12407
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-12407
ENISA EUVD
Assigner apache
Published Sep 23, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2022-4660
EUVD-2022-4660 GHSA-P2R4-RPJ8-M2P9