Non évaluée
Apache JSPWiki CSRF Account Takeover
CVE-2022-24947
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com