CVE-2009-1339 - Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434

Back Back to CVE browser

MEDIUM

Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434

Published Apr 30, 2009

6.0

MEDIUM

CVSS 2.0

EPSS 0.75%

Description

Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (10)

http://bugs.debian.org/526258
x_refsource_CONFIRM
http://secunia.com/advisories/34880
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1022146
vdb-entryx_refsource_SECTRACKPatch
http://sourceforge.net/mailarchive/forum.php?thread_name=7E0723DC-CBFF-4DBD-B26C-8686287FF689%40twiki.net&forum_name=twiki-announce
mailing-listx_refsource_MLIST
http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2009-1339
x_refsource_CONFIRMVendor Advisory
http://twiki.org/p/pub/Codev/SecurityAlert-CVE-2009-1339/TWiki-4.3.0-c-diff-cve-2009-1339.txt
x_refsource_CONFIRMExploit
http://www.nabble.com/Bug-526258:-CVE-2009-1339:-CSRF-Vulnerability-with-Image-Tag-td23311575.html
mailing-listx_refsource_MLIST
http://www.vupen.com/english/advisories/2009/1217
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/50254
vdb-entryx_refsource_XF
https://launchpad.net/bugs/cve/2009-1339
x_refsource_CONFIRM

Link	Providers	Tags
http://bugs.debian.org/526258		x_refsource_CONFIRM
http://secunia.com/advisories/34880		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1022146		vdb-entryx_refsource_SECTRACKPatch
http://sourceforge.net/mailarchive/forum.php?thread_name=7E0723DC-CBFF-4DBD-B26C-8686287FF689%40twiki.net&forum_name=twiki-announce		mailing-listx_refsource_MLIST
http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2009-1339		x_refsource_CONFIRMVendor Advisory
http://twiki.org/p/pub/Codev/SecurityAlert-CVE-2009-1339/TWiki-4.3.0-c-diff-cve-2009-1339.txt		x_refsource_CONFIRMExploit
http://www.nabble.com/Bug-526258:-CVE-2009-1339:-CSRF-Vulnerability-with-Image-Tag-td23311575.html		mailing-listx_refsource_MLIST
http://www.vupen.com/english/advisories/2009/1217		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/50254		vdb-entryx_refsource_XF
https://launchpad.net/bugs/cve/2009-1339		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 30, 2009

Updated Aug 7, 2024

Reserved Apr 17, 2009

Link CVE-2009-1339

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1339

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1339