You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Juan Pablo Santos Rodríguez <ju...@apache.org> on 2026/07/30 12:14:38 UTC

[CVE-2026-28813] JSPWiki vulnerable to JSON hijacking

Severity
Moderate

Vendor
The Apache Software Foundation

Versions Affected
Apache JSPWiki up to 2.12.3

Description
Apache JSPWiki is vulnerable to JSON Hijacking, which leads to csrf
vulnerabilities.

Mitigation
Apache JSPWiki users should upgrade to 2.12.4 or later.

Credit
The issue was discovered by Janne Jalkannen from Apache JSPWiki


References
https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2026-28813
https://www.cve.org/CVERecord?id=CVE-2026-28813