VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Mar 26, 2006· Updated Apr 16, 2026

CVE-2006-1387

CVE-2006-1387

Description

TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.

Affected products

9
  • TWiki/Twiki9 versions
    cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:twiki:twiki:2001-09-01:*:*:*:*:*:*:*
    • cpe:2.3:a:twiki:twiki:2001-12-01:*:*:*:*:*:*:*
    • cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:*
    • cpe:2.3:a:twiki:twiki:2004-09-01:*:*:*:*:*:*:*
    • cpe:2.3:a:twiki:twiki:2004-09-02:*:*:*:*:*:*:*
    • cpe:2.3:a:twiki:twiki:2004-09-03:*:*:*:*:*:*:*
    • cpe:2.3:a:twiki:twiki:2004-09-04:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.