CVE-2019-10089

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2019-10089
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10089.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-10089
Aliases
Published
2019-09-23T15:15:10Z
Modified
2024-09-03T02:21:29.074803Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

References

Affected packages

Git / github.com/apache/jspwiki

Affected ranges

Type
GIT
Repo
https://github.com/apache/jspwiki
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0a1ec7e139783515220c285be3b1cadfc077745d
Last affected
1b7f36e1ab997bcdc07f9f27f8ee8f692648411d
Last affected
2ea7973c1c7fdf2771a9743dbc8ecb27c9bb162d
Last affected
6e1dc66adf3faa22e7f1f60189611a3d8ddb0726
Last affected
791ccc1f4502a7cde258ef65ab54ab0bf6bbf005
Last affected
7d36c03d534201d044b1f5572b08478f681a39d4
Last affected
a4655648021b23c07e66ab366bed0d7fecc9fb2a
Last affected
ca56f9cd57d680f526841d112ea56e46d4f3f2fa
Last affected
d48bcef107a14dd07ecd830ab817b8df796082a4

Affected versions

2.*

2.10.3
2.10.3-RC1
2.10.3-RC2
2.10.4
2.10.4-RC1
2.10.4-RC2
2.10.4-RC3
2.10.5
2.10.5-RC1
2.10.5-RC2
2.11.0.M1
2.11.0.M1-RC1
2.11.0.M1-RC2
2.11.0.M1.RC3
2.11.0.M2
2.11.0.M2-RC1
2.11.0.M3
2.11.0.M3-RC1
2.11.0.M3-RC2
2.11.0.M4-RC1