3 matches found
SUSE CVE-2016-9646
ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder-field method similar to the CGI-param API that led to Bugzilla's CVE-2014-1572, which can be abused to lead to commit metadata forgery...
5.3CVSS9.2AI score0.01178EPSS
SaveExploits0References2
UBUNTU-CVE-2016-9646
ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder-field method similar to the CGI-param API that led to Bugzilla's CVE-2014-1572, which can be abused to lead to commit metadata forgery...
5.3CVSS7.1AI score0.01178EPSS
SaveExploits0References4
CVE-2016-9646 Commit metadata forgery via CGI::FormBuilder context-dependent APIs
ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder-field method similar to the CGI-param API that led to Bugzilla's CVE-2014-1572, which can be abused to lead to commit metadata forgery...
7.2AI score0.01178EPSS
SaveExploits0References4
20