Approved changes feed: RSS · Atom

cpe:2.3:a:brics:jwig:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBrics (32174ec3-b8e7-56c5-8826-07a0ba7cb9df)
ProductJwig (f7bb28ff-bbae-5c4f-8ed6-6a169c1f93eb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3816 vulnerable 2026-06-08 04:49:55.105409 Details available
JWIG might allow context-dependent attackers to cause a denial of service (service degradation) via loops of references to external templates. NOTE: this issue has been disputed by multiple third parties who state that only the application developer can trigger the issue, so no privilege boundaries are crossed. However, it seems possible that this is a vulnerability class to which an JWIG application may be vulnerable if template contents can be influenced, but this would be an issue in the application itself, not JWIG
Published: 2007-07-17T00:00:00.000Z
Updated: 2025-01-17T14:44:45.615Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.