CVE-2019-0224 Vulnerability Details

  /     /     /  

CVE-2019-0224 Metadata Quick Info

CVE Published: 28/03/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: apache | Vendor: Apache | Product: Apache JSPWiki
Status : PUBLISHED

---

CVE-2019-0224 Description

In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user\'s session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else\'s browser; only on its own browser.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Cross-site scripting vulnerability
Source: Apache

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).