PT-2019-6849 · Foswiki · Foswiki

Henri Salo · Publicado 2019-11-01 · Atualizado 2019-11-08 · CVE-2013-1666

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Foswiki versions prior to 1.1.8

Description The issue is related to a code injection vulnerability in the MAKETEXT macro.

Recommendations For versions prior to 1.1.8, update to version 1.1.8 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2013-1666

Produtos afetados

Foswiki

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-1666 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1666 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-1666 · Aviso do Fabricante
• http://foswiki.org/Support/SecurityAlert-CVE-2013-1666 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/03/24/20 · Nota
• https://securityfocus.com/archive/1/525733 · Nota