VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 28, 2019· Updated Jun 17, 2026

CVE-2019-0224

CVE-2019-0224

Description

In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.jspwiki:jspwiki-mainMaven
>= 2.9.0, < 2.11.0.M32.11.0.M3

Affected products

9
  • Apache/JSPWiki7 versions
    cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*range: >=2.9.0,<=2.10.5
    • cpe:2.3:a:apache:jspwiki:2.11.0:milestone1:*:*:*:*:*:*
    • cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc1:*:*:*:*:*:*
    • cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc2:*:*:*:*:*:*
    • cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc3:*:*:*:*:*:*
    • cpe:2.3:a:apache:jspwiki:2.11.0:milestone2:*:*:*:*:*:*
    • cpe:2.3:a:apache:jspwiki:2.11.0:milestone2-rc1:*:*:*:*:*:*
  • Apache/Apache JSPWikiv5
    Range: Apache JSPWiki 2.9.0 to 2.11.0.M2
  • ghsa-coords
    pkg:maven/org.apache.jspwiki/jspwiki-main
    Range: >= 2.9.0, < 2.11.0.M3

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.