CVE-2022-28731

MEDIUM · CVSS 6.5 EPSS 56.93%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-08-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-28731

Severity

MEDIUM

CVSS

6.5

EPSS

56.93%

Apache

Original NVD Description

A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.