Unscored severity · published Nov 16, 2010
CVE-2010-4215
UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for…
–
CVSS
1.1%
EPSS
No
On KEV
Description
UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
Foswiki · Foswiki
1.1.0; 1.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4215
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4215
Patch
http://foswiki.org/Support/SecurityAlertCVE20104215
Vendor Advisory
http://secunia.com/advisories/42275
sourceforge.net
http://sourceforge.net/mailarchive/message.php?msg_name=4CD9F6F5.4030204%40lavrsen.dk
www.securityfocus.com
http://www.securityfocus.com/bid/44858
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/63253
More from Foswiki
9.8
CVE-2013-1666
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro
7.5
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal
7.5
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web…
5.3
CVE-2026-2861
Foswiki Changes/Viewfile/Oops information disclosure
–
CVE-2012-6330
The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory…