Jspwiki Luki w zabezpieczeniach

Oś czasu

Wersja

2.11.0	7
2.11.1	7
2.11.2	5
2.11.0.M4	5
2.11.0.M3	3

Przeciwdziałanie

Official Fix	13
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	15

Wykorzystywanie

High	4
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	22

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	28

Uwierzytelnianie

Not Defined	0
High	0
Low	6
None	22

Interakcja z użytkownikiem

Not Defined	0
Required	23
None	5

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	9
≤6	13
≤7	2
≤8	0
≤9	0
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	9
≤6	13
≤7	2
≤8	0
≤9	1
≤10	1

VulDB

≤1	0
≤2	0
≤3	0
≤4	5
≤5	18
≤6	3
≤7	0
≤8	0
≤9	0
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	14
≤8	1
≤9	1
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	5
<5k	7
<10k	15
<25k	1
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	15
<2k	0
<5k	7
<10k	6
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (21): 2.1, 2.1.12, 2.1.121, 2.1.122, 2.4.103, 2.4.104, 2.5.139, 2.5.139 Beta, 2.5.139-beta, 2.10.1, 2.10.2, 2.10.3, 2.10.4, 2.10.5, 2.11, 2.11.0.M2, 2.11.0.M3, 2.11.0.M4, 2.11.0.M8, 2.11.1, 2.11.2

Link to Product Website: https://www.apache.org/

Typ oprogramowania: Content Management System

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2023-05-25	4.8	4.8	Apache JSPWiki Plugin cross site scripting	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.03	CVE-2022-46907
2022-08-04	6.5	6.4	Apache JSPWiki Image Plugin cross site request forgery	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-34158
2022-08-04	4.8	4.7	Apache JSPWiki Request AJAXPreview.jsp cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-28730
2022-08-04	4.8	4.7	Apache JSPWiki WeblogPlugin cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-28732
2022-08-04	5.4	5.3	Apache JSPWiki Email UserPreferences.jsp cross site request forgery	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-28731
2022-08-04	3.5	3.5	Apache JSPWiki Request XHRHtml2Markup.jsp cross site scripting	$0-$5k	$5k-$25k	Not Defined	Not Defined	0.03	CVE-2022-27166
2022-02-25	4.3	4.1	Apache JSPWiki User Preference cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-24948
2022-02-25	4.3	4.1	Apache JSPWiki User Preferences cross site request forgery	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-24947
2021-11-24	3.5	3.4	Apache JSPWiki Plugin Link cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-40369
2021-11-24	5.4	5.2	Apache JSPWiki HTTP Request denial of service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-44140