CVE-2019-0225

Published: Mar 28, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.

Vendor	Product	Versions
Apache	Apache JSPWiki	affected `Apache JSPWiki 2.9.0 to 2.11.0.M2`

References

[jspwiki-user] 20190326 [CVE-2019-0225] Apache JSPWiki Local File Inclusion (limited ROOT folder) vulnerability leads to user information disclosure

mailing-list

x_refsource_MLIST

[jspwiki-dev] 20190326 [CVE-2019-0225] Apache JSPWiki Local File Inclusion (limited ROOT folder) vulnerability leads to user information disclosure

mailing-list

x_refsource_MLIST

[oss-security] 20190326 [CVE-2019-0225] Apache JSPWiki Local File Inclusion (limited ROOT folder) vulnerability leads to user information disclosure

mailing-list

x_refsource_MLIST

[announce] 20190326 [CVE-2019-0225] Apache JSPWiki Local File Inclusion (limited ROOT folder) vulnerability leads to user information disclosure

mailing-list

x_refsource_MLIST

https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-0225

x_refsource_CONFIRM

107627

vdb-entry

x_refsource_BID

[jspwiki-commits] 20190329 [jspwiki-site] branch jbake updated: add CVE-2019-0224 and CVE-2019-0225 vulnerability disclosures

mailing-list

x_refsource_MLIST

[jspwiki-commits] 20190519 [jspwiki-site] branch jbake updated: added CVE-2019-10076, CVE-2019-10077 and CVE-2019-10078 vulnerability disclosures

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-0225

Description

Affected Products

References