CVE-2019-0225

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-0225
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0225.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-0225
Aliases
Published
2019-03-28T22:29:00Z
Modified
2026-10-24T10:30:19Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.

References

Affected packages

Git / github.com/apache/jspwiki

Affected ranges

Type
GIT
Repo
https://github.com/apache/jspwiki
Events
Introduced
7eaed006f8585a3be13508ccc66e316687194f8d
Fixed
b9c3d919beee3a73ffd87cde5021327d3a6544a5
Introduced
b9c3d919beee3a73ffd87cde5021327d3a6544a5
Last Affected
d48bcef107a14dd07ecd830ab817b8df796082a4
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.9.0"
                },
                {
                    "fixed":  "2.11.0"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:apache:jspwiki:2.11.0:-:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.11.0-NA"
                },
                {
                    "last_affected":  "2.11.0-NA"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.11.0-milestone1\\-rc1"
                },
                {
                    "last_affected":  "2.11.0-milestone1\\-rc1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.11.0-milestone1\\-rc2"
                },
                {
                    "last_affected":  "2.11.0-milestone1\\-rc2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.11.0-milestone1\\-rc3"
                },
                {
                    "last_affected":  "2.11.0-milestone1\\-rc3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:jspwiki:2.11.0:milestone2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.11.0-milestone2"
                },
                {
                    "last_affected":  "2.11.0-milestone2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:jspwiki:2.11.0:milestone2-rc1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.11.0-milestone2\\-rc1"
                },
                {
                    "last_affected":  "2.11.0-milestone2\\-rc1"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

2.*
2.11.0-NA
2.11.0-milestone1\-rc1
2.11.0-milestone1\-rc2
2.11.0-milestone1\-rc3
2.11.0-milestone2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0225.json"