CVE-2007-5119: Jspwiki

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full path) via an invalid integer in the version parameter to the default URI under attach/Main/.

Affected products

• Jspwiki Jspwiki: version 2.4.103 only; version 2.5.139-beta only

Published 2007-09-27. Last modified 2026-06-16.