{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-28812", "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "state": "PUBLISHED", "assignerShortName": "apache", "dateReserved": "2026-03-03T15:01:12.543Z", "datePublished": "2026-07-30T15:52:34.172Z", "dateUpdated": "2026-07-30T16:36:31.861Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Apache JSPWiki", "vendor": "Apache Software Foundation", "versions": [{"lessThan": "2.12.4", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Florian Holeczek from Apache JSPWiki"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges.<br>Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue."}], "value": "UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges.\nUsers are recommended to upgrade to version 2.12.4 or newer which fixes this issue."}], "metrics": [{"other": {"content": {"text": "moderate"}, "type": "Textual description of severity"}}], "problemTypes": [{"descriptions": [{"description": "Use of impersonation", "lang": "en"}]}], "providerMetadata": {"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", "dateUpdated": "2026-07-30T15:52:34.172Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://lists.apache.org/thread/n3m666d6t6871dldvz3ct49ooqkbgw2p"}], "source": {"defect": ["JSPWIKI-130"], "discovery": "UNKNOWN"}, "title": "Apache JSPWiki: UserManager does not sanity-check user database at startup", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/30/15"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-30T16:36:31.861Z"}}]}}

{}

{}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.12.4)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Apache JSPWiki", "source": "cna", "vendor": "Apache Software Foundation"}, "product": "jspwiki", "vendor": "apache"}], "created": "2026-07-30T18:00:15.001033+00:00", "updated": "2026-07-30T18:00:15.001052+00:00", "vendors": ["apache", "apache$PRODUCT$jspwiki"]}