FO
Vendor
Foswiki
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-2861 | FO Foswiki Foswiki | 5.3 | Feb 21 | Foswiki Changes/Viewfile/Oops information disclosure |
| CVE-2023-33756 | FO Foswiki Foswiki | 7.5 | Aug 8 | An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal |
| CVE-2023-24698 | FO Foswiki Foswiki | 7.5 | Aug 8 | Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web… |
| CVE-2013-1666 | FO Foswiki Foswiki | 9.8 | Nov 1 | Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro |
| CVE-2012-6330 | FO Foswiki Foswiki | – | Jan 4 | The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory… |
| CVE-2012-1004 | FO Foswiki Foswiki | – | Feb 8 | Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web… |
| CVE-2010-4215 | FO Foswiki Foswiki | – | Nov 16 | UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for… |
| CVE-2009-1434 | FO Foswiki Foswiki | – | Apr 30 | Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages,… |