CVE-2013-1751 - TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters

Back Back to CVE browser

CRITICAL

TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters

Published Nov 7, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 4.87%

Description

TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

http://www.securitytracker.com/id/1028149
x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1778
Advisory
https://security-tracker.debian.org/tracker/CVE-2013-1751
x_refsource_MISCThird Party Advisory
https://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2013-1751
x_refsource_CONFIRMMitigationPatchVendor Advisory

Link	Providers	Tags
http://www.securitytracker.com/id/1028149		x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1778		Advisory
https://security-tracker.debian.org/tracker/CVE-2013-1751		x_refsource_MISCThird Party Advisory
https://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2013-1751		x_refsource_CONFIRMMitigationPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 7, 2019

Updated Aug 6, 2024

Reserved Feb 15, 2013

Link CVE-2013-1751

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-1751

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 7, 2019

Updated Aug 6, 2024

Link EUVD-2013-1778

GitHub

No data