CVE Database
/

CVE-2019-12404

Back to search

CVE-2019-12404

Published: Sep 23, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

VendorProductVersions

n/a

Apache JSPWiki

affected
Apache JSPWiki up to 2.11.0.M4

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now