98 matches found
CVE-2012-1004
Multiple cross-site scripting XSS vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the 1 text, 2 FirstName, 3 LastName, 4 OrganisationName, 5 OrganisationUrl, 6 Profession, 7 Country, 8...
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
Directory traversal
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
Directory traversal
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
CVE-2023-33756
Summary: CVE-2023-33756 affects Foswiki, specifically the SpreadSheetPlugin, version 2.1.7 and earlier. The issue allows directory traversal, enabling an attacker to access files outside the intended directory. The available documents consistently indicate Foswiki 2.1.7 and below as affected and ...
PT-2023-24476 · Foswiki · Foswiki +1
Name of the Vulnerable Software and Affected Versions: Foswiki versions 2.1.7 and below Description: An issue in the SpreadSheetPlugin component of Foswiki allows attackers to execute a directory traversal. Recommendations: For versions 2.1.7 and below, update to a version above 2.1.7 to resolve...
PT-2023-19743 · Foswiki · Foswiki
Name of the Vulnerable Software and Affected Versions: Foswiki versions 2.1.7 and below Description: Insufficient parameter validation in the Foswiki::Sandbox component allows attackers to perform a directory traversal via supplying a crafted web request. Recommendations: For versions 2.1.7 and...
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...
CVE-2023-33756
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...
Foswiki Path Traversal Vulnerability
Foswiki is a Wiki software developed in the Perl language.Foswiki is a truly free and open-source Wiki and user-built application platform for public and corporate environments. A security vulnerability exists in Foswiki v2.1.7 and earlier versions, which stems from insufficient validation of...
Foswiki Path Traversal Vulnerability
Foswiki is a Wiki software developed in the Perl language.Foswiki is a truly free and open-source Wiki and user-built application platform for public and corporate environments. A security vulnerability exists in Foswiki v2.1.7 and earlier versions, which stems from a problem in the...
CVE-2023-24698
CVE-2023-24698 affects Foswiki up to v2.1.7, specifically the Foswiki::Sandbox component. The issue is insufficient parameter validation that allows directory traversal when a crafted web request is made. Impact: potential access to restricted filesystem areas. Affected software: Foswiki v2.1.7 a...