Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-28731

Apache JSPWiki CSRF in UserPreferences.jsp

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache JSPWiki

  • Apache JSPWiki to ≤ Apache JSPWiki up to 2.11.2affected

References