Apache Jspwiki (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-03-28. Vendor: Apache.

CVEs of Apache Jspwiki

• CVE-2019-0225 - CVSS 7.5 (high), 2019-03-28: A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by…
• CVE-2019-0224 - CVSS 6.1 (medium), 2019-03-28: In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server…