← Database

CVE-2008-1231

CRITICAL CVSS: 9.3 Published: 2008-03-10 Modified: 2026-06-16

Description

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. (dot dot) in the editor parameter.

Affected Platforms

Jspwiki Jspwiki

Weakness Type

CWE-22

References