CVE-2006-1387

Published: Mar 26, 2006Modified: Apr 16, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.

Affected (9)

Products: Twiki: Twiki

Twiki

1 product

Twiki

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Twiki Twiki	Version 2001-09-01
Twiki Twiki	Version 2001-12-01
Twiki Twiki	Version 2003-02-01
Twiki Twiki	Version 2004-09-01
Twiki Twiki	Version 2004-09-02
Twiki Twiki	Version 2004-09-03
Twiki Twiki	Version 2004-09-04
Twiki Twiki	Version 4.0.1
Twiki Twiki	Version 4.0