What is GHSA-9c4x-gmwm-cj68?

GHSA-9c4x-gmwm-cj68 is a security advisory published by GitHub Security Advisories with High severity. Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3...

Which CVE IDs does GHSA-9c4x-gmwm-cj68 cover?

GHSA-9c4x-gmwm-cj68 covers the following CVE IDs: CVE-2026-28814. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9c4x-gmwm-cj68?

GHSA-9c4x-gmwm-cj68 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-9c4x-gmwm-cj68HighCVSS 7.5

Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3...

Vendor

GitHub Security Advisories

Published

July 30, 2026

Last Modified

July 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-28814 →

📋 Description

Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-28814
https://lists.apache.org/thread/8vv0311bvrrqxsyn913pcwf7pctyk52w
http://www.openwall.com/lists/oss-security/2026/07/30/17
https://github.com/advisories/GHSA-9c4x-gmwm-cj68