PT-2019-6849 · Foswiki · Foswiki

Henri Salo · Published 2019-11-01 · Updated 2019-11-08 · CVE-2013-1666

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Foswiki versions prior to 1.1.8

Description The issue is related to a code injection vulnerability in the MAKETEXT macro.

Recommendations For versions prior to 1.1.8, update to version 1.1.8 or later to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2013-1666

Affected Products

Foswiki

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-1666 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-1666 · Vendor Advisory
• http://foswiki.org/Support/SecurityAlert-CVE-2013-1666 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1666 · Note
• http://openwall.com/lists/oss-security/2015/03/24/20 · Note
• https://securityfocus.com/archive/1/525733 · Note