CVE-2022-24947

Description

Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later.

Affected products

• Apache Software Foundation / Apache JSPWikiApache JSPWiki up to 2.11.1 – Apache JSPWiki up to 2.11.1

References

• MAILING_LISThttps://lists.apache.org/thread/txrgykjkpt80t57kzpbjo8kfrv8ss02c
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2022/02/25/1