CVE-2026-28813

Description

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue.

References

• https://lists.apache.org/thread/56440mymwkxt1hf3j8hjpo41yco7gotv
• http://www.openwall.com/lists/oss-security/2026/07/30/16