VulnSocial

CVE-2024-27136Active Exploitation(apache / jspwiki)

LOWCVSS 6.1 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for apache jspwiki systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.

apache CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • jspwiki

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
apache
Products
jspwiki

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-01: 1Active Exploitation · 2026-09-01: 109-01
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows attackers chaining CVE-2024-27136 (Langflow) and CVE-2024-47887 (Rails) for root-level compromise of AI development platforms. Campaign harvested OPENAI_API keys, AWS credentials, and deployed crypto miners while disabling audit logs. Runtime segmentation could have limited post-compromise credential access across AI infrastructure. #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/langflow-rails-cve-2026-0768-66066-credential-probing

    Post summary

    The analysis reports a real-world attack chain using CVE‑2024‑27136 and CVE‑2024‑47887 to achieve root‑level access on AI development platforms, exfiltrating API keys and credentials while deploying crypto miners.

    0000064
    2.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapachejspwiki---

Explore more

Back to dashboardapache CVEsjspwiki vulnerabilities