CVE-2026-28812 — Apache JSPWiki: UserManager does not sanity-check user database at startup

CVE-2026-28812

Apache JSPWiki: UserManager does not sanity-check user database at startup PUBLISHED

Description (CNA)

UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache JSPWiki	affected 0 before 2.12.4

CWE

No CWE identifiers supplied.

References

https://lists.apache.org/thread/n3m666d6t6871dldvz3ct49ooqkbgw2p

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/07/30/15

CISA-ADP

No English description supplied.

No references supplied.