anonhaven

CVE-2026-28813

NONE
Updated Jul 30, 2026
Apache Software Foundation
Parameter Value
Fixed In 2.12.4
Type CWE-352 (Cross-Site Request Forgery (CSRF))
Vendor Apache Software Foundation
Public PoC No

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

Weakness Type (CWE)

CWE-352 Cross-Site Request Forgery (CSRF)

Vulnerable Products

apache software foundation:apache jspwiki

References 2

https://lists.apache.org/thread/56440mymwkxt1hf3j8hjpo41yco7gotv
NVD
http://www.openwall.com/lists/oss-security/2026/07/30/16
af854a3a-2127-422b-91ae-364da2661108
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-66756

Apache

6.9

CVE-2026-66755

Apache

5.9

CVE-2026-52680

Apache Software Foundation

None

CVE-2026-48910

Apache Software Foundation

6.5

CVE-2026-28814

Apache Software Foundation

None