CVE-2025-24854 in JSPWiki

الملخص

بحسب MITRE • 31/07/2025

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.





Apache JSPWiki users should upgrade to 2.12.3 or later.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• حجز: 25/01/2025
• إفشاء: 31/07/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-318379
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00447
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Agriculture, Hostingprovider, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-24854
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-24854
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-24854/