VULNERABILITY INTELLIGENCE

CVE-2007-5119

CVSS score4.3 MEDIUM
EPSS probability1.30%
CISA KEVNot currently listed
Published2007-09-27
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N

Description

JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full path) via an invalid integer in the version parameter to the default URI under attach/Main/.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references