未評価
Apache JSPWiki CSRF in UserPreferences.jsp
CVE-2022-28731
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web jspwiki-wiki.apache.org