123 matches found
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
CVE-2023-24698
CVE-2023-24698 affects Foswiki up to v2.1.7, specifically the Foswiki::Sandbox component. The issue is insufficient parameter validation that allows directory traversal when a crafted web request is made. Impact: potential access to restricted filesystem areas. Affected software: Foswiki v2.1.7 a...
CVE-2023-33756
Summary: CVE-2023-33756 affects Foswiki, specifically the SpreadSheetPlugin, version 2.1.7 and earlier. The issue allows directory traversal, enabling an attacker to access files outside the intended directory. The available documents consistently indicate Foswiki 2.1.7 and below as affected and ...
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
PT-2023-19743 · Foswiki · Foswiki
Name of the Vulnerable Software and Affected Versions: Foswiki versions 2.1.7 and below Description: Insufficient parameter validation in the Foswiki::Sandbox component allows attackers to perform a directory traversal via supplying a crafted web request. Recommendations: For versions 2.1.7 and...
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
CVE-2023-33756: Improper Limitation of a Pathname to a Restricted Directory
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
CVE-2023-24698: Improper Limitation of a Pathname to a Restricted Directory
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
PT-2023-24476 · Foswiki · Foswiki +1
Name of the Vulnerable Software and Affected Versions: Foswiki versions 2.1.7 and below Description: An issue in the SpreadSheetPlugin component of Foswiki allows attackers to execute a directory traversal. Recommendations: For versions 2.1.7 and below, update to a version above 2.1.7 to resolve...
CVE-2013-1666
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...
Code injection
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...
CVE-2013-1666
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...
CVE-2013-1666
Affected product: Foswiki versions before 1.1.8. The vulnerability is in the MAKETEXT macro, enabling code injection that can lead to arbitrary code execution on the server (per the Foswiki advisory). Attack surface includes crafting MAKETEXT macro invocations on wiki pages when localization is e...
CVE-2013-1666
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...
CVE-2013-1666
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro...
PT-2019-6849
Name of the Vulnerable Software and Affected Versions Foswiki versions prior to 1.1.8 Description The issue is related to a code injection vulnerability in the MAKETEXT macro. Recommendations For versions prior to 1.1.8, update to version 1.1.8 or later to resolve the issue...