Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-1387

No fix known EPSS 1%

TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.

Published 2006-03-26 · CVE record · OSV

Products: twiki