https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T02:55:32.605576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-61913 cnvd-2022-61913 2026-10-25T02:55:32.608794+00:00 cnvd-2022-61913 https://cve.radiocsirt.org/vuln/euvd-2026-17786 EUVD-2026-17786 2026-10-25T02:55:32.608824+00:00 EUVD-2026-17786 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34158 fkie_cve-2022-34158 2026-10-25T02:55:32.608837+00:00

A carefully crafted invocation on the Image plugin could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow a group privilege escalation of the attacker's account. Further examination of this issue established that it could also be used to modify the email associated with the attacked account, and then a reset password request from the login page.

 https://cve.radiocsirt.org/vuln/ghsa-jp3m-p26h-mm7v GHSA-jp3m-p26h-mm7v — Apache JSPWiki CSRF due to crafted invocation on the Image plugin 2026-10-25T02:55:32.608866+00:00

Affected: Maven: org.apache.jspwiki:jspwiki-main

A carefully crafted invocation on the Image plugin could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow a group privilege escalation of the attacker's account. Further examination of this issue established that it could also be used to modify the email associated with the attacked account, and then a reset password request from the login page.

 https://cve.radiocsirt.org/vuln/gsd-2022-34158 gsd-2022-34158 2026-10-25T02:55:32.608889+00:00 gsd-2022-34158