Tiki Wiki CMS Groupware < 22 Multiple Vulnerabilities

Tiki Wiki CMS Groupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2020-29254

CVE-2020-29254 affects TikiWiki 21.2, where templates can be edited without CSRF protection due to insufficient safeguards on the web-based management interface. This enables an unauthenticated, remote attacker to lure a user into a malicious link and perform arbitrary actions with the user’s pri...