Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-44140

Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.079
EPSS Ranking 91.6%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 6.4
Products affected by CVE-2021-44140
  • Apache » Jspwiki » Version: N/A
    cpe:2.3:a:apache:jspwiki:-
  • Apache » Jspwiki » Version: 1.4.0
    cpe:2.3:a:apache:jspwiki:1.4.0
  • Apache » Jspwiki » Version: 1.5.0
    cpe:2.3:a:apache:jspwiki:1.5.0
  • Apache » Jspwiki » Version: 1.5.5
    cpe:2.3:a:apache:jspwiki:1.5.5
  • Apache » Jspwiki » Version: 1.5.7
    cpe:2.3:a:apache:jspwiki:1.5.7
  • Apache » Jspwiki » Version: 1.6.0
    cpe:2.3:a:apache:jspwiki:1.6.0
  • Apache » Jspwiki » Version: 1.6.11
    cpe:2.3:a:apache:jspwiki:1.6.11
  • Apache » Jspwiki » Version: 1.6.12
    cpe:2.3:a:apache:jspwiki:1.6.12
  • Apache » Jspwiki » Version: 1.7.0
    cpe:2.3:a:apache:jspwiki:1.7.0
  • Apache » Jspwiki » Version: 1.8.0
    cpe:2.3:a:apache:jspwiki:1.8.0
  • Apache » Jspwiki » Version: 1.8.2
    cpe:2.3:a:apache:jspwiki:1.8.2
  • Apache » Jspwiki » Version: 2.0.0
    cpe:2.3:a:apache:jspwiki:2.0.0
  • Apache » Jspwiki » Version: 2.0.14
    cpe:2.3:a:apache:jspwiki:2.0.14
  • Apache » Jspwiki » Version: 2.0.32
    cpe:2.3:a:apache:jspwiki:2.0.32
  • Apache » Jspwiki » Version: 2.0.36
    cpe:2.3:a:apache:jspwiki:2.0.36
  • Apache » Jspwiki » Version: 2.0.39
    cpe:2.3:a:apache:jspwiki:2.0.39
  • Apache » Jspwiki » Version: 2.0.45
    cpe:2.3:a:apache:jspwiki:2.0.45
  • Apache » Jspwiki » Version: 2.10.0
    cpe:2.3:a:apache:jspwiki:2.10.0
  • Apache » Jspwiki » Version: 2.10.1
    cpe:2.3:a:apache:jspwiki:2.10.1
  • Apache » Jspwiki » Version: 2.10.2
    cpe:2.3:a:apache:jspwiki:2.10.2
  • Apache » Jspwiki » Version: 2.10.3
    cpe:2.3:a:apache:jspwiki:2.10.3
  • Apache » Jspwiki » Version: 2.10.4
    cpe:2.3:a:apache:jspwiki:2.10.4
  • Apache » Jspwiki » Version: 2.10.5
    cpe:2.3:a:apache:jspwiki:2.10.5
  • Apache » Jspwiki » Version: 2.2.13
    cpe:2.3:a:apache:jspwiki:2.2.13
  • Apache » Jspwiki » Version: 2.2.14
    cpe:2.3:a:apache:jspwiki:2.2.14
  • Apache » Jspwiki » Version: 2.2.16
    cpe:2.3:a:apache:jspwiki:2.2.16
  • Apache » Jspwiki » Version: 2.2.19
    cpe:2.3:a:apache:jspwiki:2.2.19
  • Apache » Jspwiki » Version: 2.2.20
    cpe:2.3:a:apache:jspwiki:2.2.20
  • Apache » Jspwiki » Version: 2.2.26
    cpe:2.3:a:apache:jspwiki:2.2.26
  • Apache » Jspwiki » Version: 2.2.28
    cpe:2.3:a:apache:jspwiki:2.2.28
  • Apache » Jspwiki » Version: 2.2.33
    cpe:2.3:a:apache:jspwiki:2.2.33
  • Apache » Jspwiki » Version: 2.3.50
    cpe:2.3:a:apache:jspwiki:2.3.50
  • Apache » Jspwiki » Version: 2.4.0
    cpe:2.3:a:apache:jspwiki:2.4.0
  • Apache » Jspwiki » Version: 2.4.100
    cpe:2.3:a:apache:jspwiki:2.4.100
  • Apache » Jspwiki » Version: 2.4.102
    cpe:2.3:a:apache:jspwiki:2.4.102
  • Apache » Jspwiki » Version: 2.4.103
    cpe:2.3:a:apache:jspwiki:2.4.103
  • Apache » Jspwiki » Version: 2.4.104
    cpe:2.3:a:apache:jspwiki:2.4.104
  • Apache » Jspwiki » Version: 2.4.15
    cpe:2.3:a:apache:jspwiki:2.4.15
  • Apache » Jspwiki » Version: 2.4.56
    cpe:2.3:a:apache:jspwiki:2.4.56
  • Apache » Jspwiki » Version: 2.4.69
    cpe:2.3:a:apache:jspwiki:2.4.69
  • Apache » Jspwiki » Version: 2.4.71
    cpe:2.3:a:apache:jspwiki:2.4.71
  • Apache » Jspwiki » Version: 2.4.87
    cpe:2.3:a:apache:jspwiki:2.4.87
  • Apache » Jspwiki » Version: 2.5.124
    cpe:2.3:a:apache:jspwiki:2.5.124
  • Apache » Jspwiki » Version: 2.5.139
    cpe:2.3:a:apache:jspwiki:2.5.139
  • Apache » Jspwiki » Version: 2.5.79
    cpe:2.3:a:apache:jspwiki:2.5.79
  • Apache » Jspwiki » Version: 2.5.93
    cpe:2.3:a:apache:jspwiki:2.5.93
  • Apache » Jspwiki » Version: 2.6.0
    cpe:2.3:a:apache:jspwiki:2.6.0
  • Apache » Jspwiki » Version: 2.6.1
    cpe:2.3:a:apache:jspwiki:2.6.1
  • Apache » Jspwiki » Version: 2.6.2
    cpe:2.3:a:apache:jspwiki:2.6.2
  • Apache » Jspwiki » Version: 2.6.3
    cpe:2.3:a:apache:jspwiki:2.6.3
  • Apache » Jspwiki » Version: 2.6.4
    cpe:2.3:a:apache:jspwiki:2.6.4
  • Apache » Jspwiki » Version: 2.8.0
    cpe:2.3:a:apache:jspwiki:2.8.0
  • Apache » Jspwiki » Version: 2.8.1
    cpe:2.3:a:apache:jspwiki:2.8.1
  • Apache » Jspwiki » Version: 2.8.2
    cpe:2.3:a:apache:jspwiki:2.8.2
  • Apache » Jspwiki » Version: 2.8.3
    cpe:2.3:a:apache:jspwiki:2.8.3
  • Apache » Jspwiki » Version: 2.8.4
    cpe:2.3:a:apache:jspwiki:2.8.4
  • Apache » Jspwiki » Version: 2.9.0
    cpe:2.3:a:apache:jspwiki:2.9.0
  • Apache » Jspwiki » Version: 2.9.1
    cpe:2.3:a:apache:jspwiki:2.9.1


Contact Us

Shodan ® - All rights reserved