CVE-2022-27166

Summary

A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Affected Software

VendorProductVersion RangeStatus
Apache Software FoundationApache JSPWikiApache JSPWiki <= Apache JSPWiki up to 2.11.2affected

Weaknesses

  • Cross-site scripting vulnerability on XHRHtml2Markup.jsp

ADP Enrichment

CVE Program Container

Additional References

References