N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-24853

CVE-2025-24853: Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering

A carefully crafted request when creating a header link using the wiki markup syntax, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Further research by the JSPWiki team showed that the markdown parser allowed this kind of attack too.

Apache JSPWiki users should upgrade to 2.12.3 or later.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-24853

CVE-2025-24853:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
org.apache.jspwiki:jspwiki-main	maven	< 2.12.3	2.12.3
org.apache.jspwiki:jspwiki-markdown	maven	< 2.12.3	2.12.3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in two parts of Apache JSPWiki: the core markup parser and the Markdown extension. Both failed to properly sanitize user input when rendering links, leading to a Cross-Site Scripting (XSS) vulnerability. The analysis of the provided patches confirms this.

JSPWiki Core Parser (JSPWikiMarkupParser.java): The makeLink function, when creating a footnote link, directly used the provided text without escaping, even when the allowHTML setting was turned off. An attacker could craft a malicious link with embedded JavaScript, which would then be executed in the victim's browser. The patch introduces conditional escaping using escapeHTMLEntities when HTML is not allowed, mitigating the vulnerability.
Markdown Extension (MarkdownDocument.java): The options method, responsible for configuring the underlying flexmark-java Markdown parser, did not set the option to escape HTML based on the wiki's global configuration. This resulted in the Markdown parser always rendering raw HTML, creating another vector for XSS. The fix involves setting the HtmlRenderer.ESCAPE_HTML option according to the jspwiki.translatorReader.allowHTML property.

Both identified functions are directly involved in the processing of potentially malicious input and were modified in the security patches to add the necessary sanitization. Therefore, they are the key indicators of this vulnerability at runtime.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.