{"id":"CVE-2019-10077","aliases":["GHSA-cj6j-32rg-45r2"],"url":"https://o3.security/vulnerability/CVE-2019-10077","summary":"Cross-site Scripting in JSPWiki","details":"A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.","published":"2019-05-20T21:29:00.817Z","modified":"2026-09-18T14:08:52.200259Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"org.apache.jspwiki:jspwiki-war","fixedVersion":"2.11.0.M4"},{"ecosystem":"Maven","name":"org.apache.jspwiki:jspwiki-main","fixedVersion":"2.11.0.M4"}],"fix":null,"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2019/05/19/5"},{"type":"WEB","url":"http://www.securityfocus.com/bid/108437"},{"type":"WEB","url":"https://lists.apache.org/thread.html/aac253cfc33c0429b528e2fcbe82d3a42d742083c528f58d192dfd16%40%3Ccommits.jspwiki.apache.org%3E"},{"type":"ADVISORY","url":"https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10077"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-18T14:08:52.200259Z"}}