Unrated severityNVD Advisory· Published Jul 30, 2026· Updated Jul 31, 2026
Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering
CVE-2026-28814
Description
Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.
Affected products
1Patches
Vulnerability mechanics
References
1- lists.apache.org/thread/8vv0311bvrrqxsyn913pcwf7pctyk52wmitrevendor-advisory
News mentions
0No linked articles in our index yet.