Описание
ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata forgery.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 3.201802280-1 |
| cosmic | not-affected | 3.201802280-1 |
| devel | not-affected | 3.201802280-1 |
| disco | not-affected | 3.201802280-1 |
| eoan | not-affected | 3.201802280-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | 3.201802280-1 |
| esm-apps/focal | not-affected | 3.201802280-1 |
| esm-apps/jammy | not-affected | 3.201802280-1 |
Показывать по
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata forgery.
ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->fie ...
ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata forgery.
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3