CVE-2026-28813EPSS p17.5%

CVE-2026-28813CVE-2026-28813

apache / jspwiki

Description

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

Scoring

CVSS 8.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS0.27% probability of exploitation · percentile 17.5% · 2026-10-06T12:00:23Z
Last modified2026-08-05
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.