Unrated
Apache JSPWiki CSRF Account Takeover
CVE-2022-24947
First seen on SecPulse
Original description The description as published by the source.
Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com