CVE-2026-28813 — Apache JSPWiki: JSPWiki vulnerable to JSON hijacking

CVE-2026-28813

Apache JSPWiki: JSPWiki vulnerable to JSON hijacking PUBLISHED

Description (CNA)

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache JSPWiki	affected 0 before 2.12.4

CWE

CWE-352

References

https://lists.apache.org/thread/56440mymwkxt1hf3j8hjpo41yco7gotv

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/07/30/16

CISA-ADP

No English description supplied.

No references supplied.