CVEvulnerability

CVE-2006-1387

4.0 MEDIUM Published 2006-03-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-03-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P

Description

TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.

Affected configurations

• twiki twiki 4.0 • twiki twiki 4.0.1 • twiki twiki 2001-09-01 • twiki twiki 2001-12-01 • twiki twiki 2003-02-01 • twiki twiki 2004-09-01 • twiki twiki 2004-09-02 • twiki twiki 2004-09-03 • twiki twiki 2004-09-04

References