GCVE - cpe:2.3:a:foswiki:foswiki:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:foswiki:foswiki:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Foswiki (`26c77ff9-3ffa-5727-ad91-eadf35395668`)
Product	Foswiki (`e03d195d-831e-5ede-bc0b-9a5f3c678735`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/foswiki/distro`	purl2cpe	2026-06-01 10:17:43.885871
`pkg:rpm/opensuse/foswiki`	purl2cpe	2026-06-01 10:17:43.885874
`pkg:sourceforge/foswiki`	purl2cpe	2026-06-01 10:17:43.885877

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-2861`	vulnerable	2026-06-08 07:55:17.745262	Foswiki Changes/Viewfile/Oops information disclosure MEDIUM (5.3) A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 2.1.11 is sufficient to fix this issue. The patch is identified as 31aeecb58b64/d8ed86b10e46. Upgrading the affected component is recommended. Published: 2026-02-21T06:02:07.609Z Updated: 2026-03-16T15:24:19.883Z Open on db.gcve.eu Reference links https://vuldb.com/?id.347101 https://vuldb.com/?ctiid.347101 https://vuldb.com/?submit.753966 https://foswiki.org/Tasks/Item15600 https://foswiki.org/Tasks/Item15601	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33756`	vulnerable	2026-06-08 06:06:23.412721	Details available An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal. Published: 2023-08-08T00:00:00.000Z Updated: 2024-10-15T18:00:25.260Z Open on db.gcve.eu Reference links https://foswiki.org/Support/SecurityAlert-CVE-2023-33756	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24698`	vulnerable	2026-06-08 05:56:06.201140	Details available Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request. Published: 2023-08-08T00:00:00.000Z Updated: 2024-10-15T18:07:11.016Z Open on db.gcve.eu Reference links https://foswiki.org/Support/SecurityAlert-CVE-2023-24698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1666`	vulnerable	2026-06-08 05:03:55.389001	Details available Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro. Published: 2019-11-01T16:48:00.000Z Updated: 2024-08-06T15:13:32.184Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2013-1666 http://www.openwall.com/lists/oss-security/2015/03/24/20 http://foswiki.org/Support/SecurityAlert-CVE-2013-1666 https://www.securityfocus.com/archive/1/525733	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4853`	not_vulnerable	2026-06-08 04:51:50.195132	Details available Multiple cross-site scripting (XSS) vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2010-05-07T18:23:00.000Z Updated: 2024-08-07T07:17:25.716Z Open on db.gcve.eu Reference links http://static.jumpbox.com/README/README-foswiki.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/58588 http://www.vupen.com/english/advisories/2009/3258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1434`	vulnerable	2026-06-08 04:51:23.013787	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Foswiki

Notes

PURL mappings

Vulnerability references

Contribute