CVE-2026-28813

high

Description

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

References

https://lists.apache.org/thread/56440mymwkxt1hf3j8hjpo41yco7gotv

http://www.openwall.com/lists/oss-security/2026/07/30/16

Details

Source: Mitre, NVD

Published: 2026-07-30

Updated: 2026-07-31

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.0011

Detections

Analytics