Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache JSPWiki

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-28812

    Apache JSPWiki: UserManager does not sanity-check user database at startup

    UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.

    Apache Software Foundation Apache JSPWiki
  • Critical 9.1
    CVE-2021-44140

    Arbitrary file deletion on logout

    Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki use…

    Apache Software Foundation Apache JSPWiki org.apache.jspwiki:jspwiki-main Maven