CVE-2012-6330

The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consumption) via a large integer in a %MAKETEXT% macro.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2013-01-04

Last modified

2024-08-06

Weaknesses

CWE-189

Affected products

• Foswiki (Foswiki)
• Twiki (Twiki)

References

• http://sourceforge.net/mailarchive/message.php?msg_id=30219695
• http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329
• http://www.securityfocus.com/bid/56950