THREATOPS

THREAT OPS › Threat News › CVE-2026-28813: Apache JSPWiki: JSON hijacking

CVE-2026-28813: Apache JSPWiki: JSON hijacking

medoss_secPublished 2026-07-30

<p>Posted by Juan Pablo Santos Rodríguez on Jul 30</p>Severity<br /> Moderate<br /> <br /> Vendor<br /> The Apache Software Foundation<br /> <br /> Versions Affected<br /> Apache JSPWiki up to 2.12.3<br /> <br /> Description<br /> Apache JSPWiki is vulnerable to JSON Hijacking, which leads to csrf<br /> vulnerabilities.<br /> <br /> Mitigation<br /> Apache JSPWiki users should upgrade to 2.12.4 or

MITRE ATT&CK techniques

VulnerabilitiesT1588.006

Indicators of compromise

CVE-2026-28813cve
https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2026-28813url

Original source: https://seclists.org/oss-sec/2026/q3/341