What is GHSA-3qxc-7g4v-3gm9?

GHSA-3qxc-7g4v-3gm9 is a security advisory published by GitHub Security Advisories with Critical severity. UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow...

Which CVE IDs does GHSA-3qxc-7g4v-3gm9 cover?

GHSA-3qxc-7g4v-3gm9 covers the following CVE IDs: CVE-2026-28812. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3qxc-7g4v-3gm9?

GHSA-3qxc-7g4v-3gm9 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-3qxc-7g4v-3gm9CriticalCVSS 9.8

UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow...

Vendor

GitHub Security Advisories

Published

July 30, 2026

Last Modified

July 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-28812 →

📋 Description

UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-28812
https://lists.apache.org/thread/n3m666d6t6871dldvz3ct49ooqkbgw2p
http://www.openwall.com/lists/oss-security/2026/07/30/15
https://github.com/advisories/GHSA-3qxc-7g4v-3gm9