[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqmUcRTO_yFHU2vWQPTLlJtH0TgE2162yt2gGEAsVFYA":3,"g5a-risk:CVE-2021-44140":110},{"success":4,"data":5,"meta":108},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":60,"weaknesses":61,"weaknessesCount":49,"isActivelyExploited":70,"cisaInfo":27,"otxData":27,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":106,"notableEvents":107},"CVE-2021-44140","What is CVE-2021-44140?","Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later.","Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on log...","2021-11-24T12:15:07.663","2021-11-29T14:42:35.9",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:P","PARTIAL",6.4,"MEDIUM",10,4.9,0.06158,[40,40,40,40,40,40,40],"Critical",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"apache","jspwiki","*","cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*",1,[51,56],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fjspwiki-wiki.apache.org\u002FWiki.jsp?page=CVE-2021-44140","Apache",[55],"Vendor Advisory",{"url":57,"source":53,"tags":58},"https:\u002F\u002Flists.apache.org\u002Fthread\u002F5qglpjdhvobppx7j550lf1sk28f6011t",[59,55],"Mailing List",2,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2021-44140? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-44140, a critical severity cyber security vulnerability from 2021. Remote attackers may delete arbitrary files in a system...","CVE-2021-44140, CVE-2021-44140 vulnerability, CVE-2021-44140 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, apache security, jspwiki vulnerability","\u002Fwhat-is\u002Fcve-2021-44140",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-44140","Cybersecurity","CVE-2021-44140, CVE-2021-44140 vulnerability, CVE-2021-44140 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":27,"Negate":27,"Nodes":99},[100],{"Operator":101,"Negate":27,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":104,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":105,"VersionEndIncluding":27},"0EA27DB0-8A88-4DFF-AB00-A3E11C6D6181","2.11.0",[],[],{"lastModified":11,"cacheTime":109,"version":33},1793196319865,{"score":111,"band":112,"action":113,"scoredAt":114},54,"Medium","Plan remediation","2026-07-01T10:27:15.928745+00:00"]