A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.
A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.
From Apache JSPWiki through Apache JSPWiki up to 2.11.2 (custom)
Problem Types
Type
CWE ID
Description
text
N/A
CSRF Account Takeover
Type: text
CWE ID: N/A
Description: CSRF Account Takeover
Metrics
Version
Base score
Base severity
Vector
Metrics Other Info
unknown
other:
critical
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Apache JSPWiki users should upgrade to 2.11.3 or later. Installations >= 2.7.0 can also enable user management workflows' manual approval to mitigate the issue.
Exploits
Credits
This issue was discovered by Fabrice Perez, <fabioperez AT gmail DOT com>
A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.