Unscored severity · published Jan 4, 2013
CVE-2012-6330
The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory…
–
CVSS
35.7%
EPSS
No
On KEV
Description
The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.
Exploitation
Is it being used?
Exploit prediction (EPSS)35.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
Foswiki · Foswiki
1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.10; +7 more · source: NVD
TW
Twiki · Twiki
through 5.1.2; 5.1.0; 5.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-6330
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-6330
sourceforge.net
http://sourceforge.net/mailarchive/message.php?msg_id=30219695
Vendor Advisory
http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329
www.securityfocus.com
http://www.securityfocus.com/bid/56950
More from Foswiki
9.8
CVE-2013-1666
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro
7.5
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal
7.5
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web…
5.3
CVE-2026-2861
Foswiki Changes/Viewfile/Oops information disclosure
–
CVE-2012-1004
Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web…