FO
Product
Foswiki
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add Foswiki to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-1666 | 9.8 | Nov 1 | Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro Affected: 1.0.0 before 1.1.8 |
| CVE-2023-33756 | 7.5 | Aug 8 | An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal Affected: 1.0.0 through 2.1.7 |
| CVE-2023-24698 | 7.5 | Aug 8 | Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web… Affected: 2.0.0 through 2.1.7 |
| CVE-2026-2861 | 5.3 | Feb 21 | Foswiki Changes/Viewfile/Oops information disclosure Affected: before 2.1.11 |
| CVE-2012-6330 | – | Jan 4 | The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.10; +7 more |
| CVE-2012-1004 | – | Feb 8 | Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web… Affected: 1.1.0; 1.1.1; 1.1.2; 1.1.3; 1.1.4; 1.1.4; +1 more |
| CVE-2010-4215 | – | Nov 16 | UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for… Affected: 1.1.0; 1.1.1 |
| CVE-2009-1434 | – | Apr 30 | Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages,… Affected: through 1.0.4; 1.0.0; 1.0.1; 1.0.2; 1.0.3 |
Showing 8