{"id":"CVE-2022-27166","state":"PUBLISHED","title":"XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2","description":"A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.","publishedAt":"2022-08-04T06:15:17.000Z","updatedAt":"2024-08-03T05:18:39.251Z","severity":null,"assigner":"apache","products":["Apache Software Foundation Apache JSPWiki"],"affected":[{"vendor":"Apache Software Foundation","product":"Apache JSPWiki","versions":[{"version":"Apache JSPWiki","status":"affected","lessThanOrEqual":"Apache JSPWiki up to 2.11.2","versionType":"custom"}]}],"references":["https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:52.117Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/27xxx/CVE-2022-27166.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-27166","state":"PUBLISHED","datePublished":"2022-08-04T06:15:17.000Z","dateUpdated":"2024-08-03T05:18:39.251Z","assignerShortName":"apache","assignerOrgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","dateReserved":"2022-03-14T00:00:00.000Z"},"containers":{"cna":{"title":"XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2","descriptions":[{"lang":"en","value":"A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim."}],"affected":[{"vendor":"Apache Software Foundation","product":"Apache JSPWiki","versions":[{"version":"Apache JSPWiki","status":"affected","lessThanOrEqual":"Apache JSPWiki up to 2.11.2","versionType":"custom"}]}],"references":[{"url":"https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732","tags":["x_refsource_MISC"]}],"metrics":[{"other":{"content":{"other":"moderate"},"type":"unknown"}}],"problemTypes":[{"descriptions":[{"description":"Cross-site scripting vulnerability on XHRHtml2Markup.jsp","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"apache","dateUpdated":"2022-08-04T06:15:17.000Z","orgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09"},"credits":[{"lang":"en","value":"Issue was discovered by Salt, <saltnekoko AT gmail DOT com>"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@apache.org","ID":"CVE-2022-27166","STATE":"PUBLIC","TITLE":"XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Apache JSPWiki","version":{"version_data":[{"version_affected":"<=","version_name":"Apache JSPWiki","version_value":"Apache JSPWiki up to 2.11.2"}]}}]},"vendor_name":"Apache Software Foundation"}]}},"credit":[{"lang":"eng","value":"Issue was discovered by Salt, <saltnekoko AT gmail DOT com>"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":[{"other":"moderate"}],"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Cross-site scripting vulnerability on XHRHtml2Markup.jsp"}]}]},"references":{"reference_data":[{"name":"https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732","refsource":"MISC","url":"https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T05:18:39.251Z"}}]}}}