CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It affects Apache. It may be remotely exploitable.
CVE
CVE-2021-44140
Severity
CRITICAL
CVSS
9.1
EPSS
6.16%
Apache
Original NVD Description
Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later.
Related CVEs
Other vulnerabilities affecting the same vendor(s)