Vulnerability Database

290,018

Total vulnerabilities in the database

CVE-2019-0225

A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:C/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
apache / jspwiki 2.11.0-milestone1-rc1 2.11.0-milestone1-rc1.x
apache / jspwiki 2.11.0-milestone1-rc2 2.11.0-milestone1-rc2.x
apache / jspwiki 2.11.0-milestone1-rc3 2.11.0-milestone1-rc3.x
apache / jspwiki 2.11.0-milestone2-rc1 2.11.0-milestone2-rc1.x
apache / jspwiki 2.11.0-milestone2 2.11.0-milestone2.x
apache / jspwiki 2.11.0 2.11.0.x
apache / jspwiki 2.9.0 2.11.0
org.apache.jspwiki / jspwiki-war 2.9.0 2.11.0.M3