未評価
In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the...
CVE-2019-0224
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory securityfocus.com
- advisory jspwiki-wiki.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org