GCVE - cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*

part: a version: 4.1.2 update: *

Vendor	Twiki (`3a715e6b-0582-5b8f-8e4f-000ddecce81e`)
Product	Twiki (`3cf8f6ac-b426-5e8a-bd57-f1b5cdff3037`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:rpm/opensuse/twiki`	purl2cpe	2026-06-01 10:12:44.341816
`pkg:sourceforge/twiki`	purl2cpe	2026-06-01 10:12:44.341817

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-3010`	vulnerable	2026-06-08 04:58:10.292565	Details available Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or (2) the query string to SlideShow.pm in the SlideShowPlugin. Published: 2011-09-30T10:00:00.000Z Updated: 2024-09-17T03:03:48.239Z Open on db.gcve.eu Reference links http://www.mavitunasecurity.com/xss-vulnerability-in-twiki5 http://www.osvdb.org/75674 http://securitytracker.com/id?1026091 http://secunia.com/advisories/46123 http://develop.twiki.org/trac/changeset/21920	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1838`	vulnerable	2026-06-08 04:58:02.346564	Details available Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a (1) view script or (2) login script. Published: 2011-05-20T22:00:00.000Z Updated: 2024-08-06T22:37:26.082Z Open on db.gcve.eu Reference links http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2011-1838 http://www.mavitunasecurity.com/XSS-vulnerability-in-Twiki/ http://securitytracker.com/id?1025542 http://www.securityfocus.com/archive/1/518038/100/0/threaded http://www.vupen.com/english/advisories/2011/1258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3841`	vulnerable	2026-06-08 04:55:17.504537	Details available Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script. Published: 2010-10-18T16:00:00.000Z Updated: 2024-08-07T03:26:12.232Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/62557 http://secunia.com/advisories/41796 http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2010-3841 http://www.securityfocus.com/bid/44103	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4898`	vulnerable	2026-06-08 04:51:50.414247	Details available Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the ACTION attribute of a FORM element, in conjunction with a call to the submit method in the onload attribute of a BODY element. NOTE: this issue exists because of an insufficient fix for CVE-2009-1339. Published: 2010-09-07T16:30:00.000Z Updated: 2024-09-16T18:49:22.400Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/08/02/17 http://www.openwall.com/lists/oss-security/2010/08/03/8 http://twiki.org/cgi-bin/view/Codev/SecurityAuditTokenBasedCsrfFix	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1339`	vulnerable	2026-06-08 04:51:22.097801	Details available Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434. Published: 2009-04-30T20:00:00.000Z Updated: 2024-08-07T05:13:25.292Z Open on db.gcve.eu Reference links https://launchpad.net/bugs/cve/2009-1339 http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2009-1339 http://www.vupen.com/english/advisories/2009/1217 http://sourceforge.net/mailarchive/forum.php?thread_name=7E0723DC-CBFF-4DBD-B26C-8686287FF689%40twiki.net&forum_name=twiki-announce http://secunia.com/advisories/34880	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5305`	vulnerable	2026-06-08 04:50:50.732108	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5304`	vulnerable	2026-06-08 04:50:50.725643	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4998`	vulnerable	2026-06-08 04:50:48.803275	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3195`	vulnerable	2026-06-08 04:50:33.372099	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5193`	vulnerable	2026-06-08 04:50:04.546686	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

TWiki 4.1.2

Notes

PURL mappings

Vulnerability references

Contribute