CVE-2013-1751

TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-11-07

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Twiki (Twiki)

References

• http://www.securitytracker.com/id/1028149
• https://security-tracker.debian.org/tracker/CVE-2013-1751
• https://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2013-1751