You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@jspwiki.apache.org by Juan Pablo Santos Rodríguez <ju...@apache.org> on 2026/07/30 12:14:06 UTC

[CVE-2026-28811] Error Handling - Reveals Error Details

Severity
Low

Vendor
The Apache Software Foundation

Versions Affected
Apache JSPWiki up to 2.12.3

Description
Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3.

Mitigation
Apache JSPWiki users should upgrade to 2.12.4 or later.

Credit
The issue was discovered by Cristian Borlovan from Ounce Labs


References
https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2026-28811
https://www.cve.org/CVERecord?id=CVE-2026-28811