CVE-2019-0225

Vulnerability

A path traversal vulnerability exists in Apache JSPWiki versions 2.9.0 to 2.11.0.M2. A specially crafted URL can bypass access controls and read files located under the application's ROOT directory [2][3]. This occurs due to insufficient input validation on the Wiki.jsp page or similar components that handle file access.

Exploitation

An attacker with network access can craft a malicious URL containing path traversal sequences (e.g., ../) to navigate outside the intended restricted directory. No authentication is required, and the attack can be performed remotely by sending the URL to the affected JSPWiki instance [2][4].

Impact

Successful exploitation allows an attacker to read files under the ROOT directory, such as configuration files or user registration data, leading to the disclosure of registered users' details (e.g., usernames, email addresses) [2][3]. This constitutes a confidentiality breach.

Mitigation

Apache JSPWiki users should upgrade to version 2.11.0.M3 or later, which contains a fix for this vulnerability [3][4]. As of the advisory publication, no other workarounds are documented; upgrading is the recommended mitigation.