CVE-2007-5119
Published: 27 September 2007
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full path) via an invalid integer in the version parameter to the default URI under attach/Main/.
Notes
| Author | Note |
|---|---|
| jdstrand | version 2.2 (as in Ubuntu) may not be afected |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
jspwiki Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
| edgy |
Ignored
(end of life, was needed)
|
|
| feisty |
Ignored
(end of life, was needed)
|
|
| gutsy |
Ignored
(end of life, was needed)
|
|
| hardy |
Released
(2.5.139-1)
|
|
| intrepid |
Released
(2.5.139-1)
|
|
| jaunty |
Released
(2.5.139-1)
|
|
| karmic |
Released
(2.5.139-1)
|
|
| upstream |
Released
(2.5.139)
|