| Package | Affected versions | Patched versions |
|---|---|---|
| twiki | = 2001-09-01= 2001-12-01= 2003-02-01= 2004-09-01= 2004-09-02= 2004-09-03= 2004-09-04= 4.0= 4.0.1 |
TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free