High · 8.8 CVE-2026-28813 EUVD-2026-51180GHSA-59wm-6vhj-9fgr

Apache JSPWiki: JSPWiki vulnerable to JSON hijacking

Published Jul 30, 2026 · Updated Jul 31, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache JSPWiki

Description

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities.
Users are recommended to upgrade to version 2.12.4, which fixes this issue.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache JSPWiki	< 2.12.4	2.12.4

References

https://lists.apache.org/thread/56440mymwkxt1hf3j8hjpo41yco7gotv vendor-advisory