PoC Index

CVE-2019-0225

HIGH 7.8EPSS 10.3%

A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.

CVSS v3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0
7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
EPSS
10.26% chance of exploitation in the next 30 days, 95th percentile
Published
2019-03-28
Updated
2024-08-04

Proof-of-concept exploits (1)

References

Related