CVE-2009-1434

MEDIUM 6.8CVE-2009-1434 · Published 30/04/2009 · updated 16/06/2026

In short

CVE-2009-1434 is a MEDIUM (CVSS 6.8) vulnerability affecting foswiki (foswiki).
Chance of exploitation in the next 30 days (EPSS): 0.67%, higher than 52.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
foswiki foswiki	`= 1.0.0= 1.0.1= 1.0.2= 1.0.3≤ 1.0.4`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a (1) save or (2) view script in the SRC attribute of an IMG element, a related issue to CVE-2009-1339.

References

foswiki.org/Support/SecurityAlert-CVE-2009-1434 · Patch
osvdb.org/54148
secunia.com/advisories/34863 · Vendor Advisory
sourceforge.net/mailarchive/forum.php · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/50256
launchpad.net/bugs/cve/2009-1434

More vulnerabilities in foswiki

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

foswiki

= 1.0.0= 1.0.1= 1.0.2= 1.0.3≤ 1.0.4

No fix yet

Description

More vulnerabilities in foswiki

See all →