Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2022-24948

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2022-24948.

Coverage Span: 2022-03-02
Reports: 1 related reports

Associated Reports & Timeline

CVE-2022-24948: Apache JSPWiki preauth Stored XSS to ATO

CVE-2022-24948: how a tricky stored XSS in JSPWiki's username field was exploited via a meta-tag focus trick that avoids colons, escalating pre-auth injection toward account takeover.