CVE-2008-0165

ikiwiki < 2.41 - Cross-Site Request Forgery via Preferences and Edit Forms

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.

References (7)

Core 7
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29907
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1553
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475445
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29932
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1297/references
Various Sources x_refsource_confirm
http://ikiwiki.info/security/#index31h2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41904

Scores

EPSS 0.0064
EPSS Percentile 46.3%

Details

CWE
CWE-352
Status published
Products (1)
ikiwiki/ikiwiki < 2.41
Published Apr 21, 2008
Tracked Since Feb 18, 2026