Foswiki

9 CVEs across 1 Foswiki products. Browse Foswiki vulnerabilities, severities, and proof-of-concept exploits.

Foswiki products with known CVEs

ProductCVEs
Foswiki9
Foswiki CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-2861Medium5.32026-02-21A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation resu…
CVE-2023-33756High7.52023-08-08An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal.
CVE-2023-24698High7.52023-08-08Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying…
CVE-2013-1666Critical9.82019-11-01Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro.
CVE-2012-63302013-01-04The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of se…
CVE-2012-10042012-02-08Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject…
CVE-2010-42152010-11-17UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the top…
CVE-2009-48532010-05-07Multiple cross-site scripting (XSS) vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System allow remote attackers to inject arbitrary web script or HT…
CVE-2009-14342009-04-30Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests th…