HIGH 7.5 NVD
CVE-2026-28814
Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variable
Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables.
Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.
References
- https://lists.apache.org/thread/8vv0311bvrrqxsyn913pcwf7pctyk52w
- http://www.openwall.com/lists/oss-security/2026/07/30/17
- https://www.openwall.com/lists/oss-security/2026/07/30/17
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-07-30 via NVD.
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.