VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 5, 2012· Updated Apr 29, 2026

CVE-2011-4452

CVE-2011-4452

Description

Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to hijack the authentication of administrators for requests that remove arbitrary user accounts via a delete operation, as demonstrated by an {{image}} action.

Affected products

2
  • Wikkawiki/Wikkawiki2 versions
    cpe:2.3:a:wikkawiki:wikkawiki:1.3.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wikkawiki:wikkawiki:1.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wikkawiki:wikkawiki:1.3.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.