CVE-2019-12404

Description

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victims browser and get some sensitive information about the victim.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

4.421

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-12407,CVE-2019-12404,CVE-2019-10089,CVE-2019-10087,CVE-2019-10090 are fixed in Apache - jspwiki-war 2.11.0	Windows
Vulnerabilities CVE-2019-12407,CVE-2019-12404,CVE-2019-10089,CVE-2019-10087,CVE-2019-10090 are fixed in Apache - jspwiki-war for Linux 2.11.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234