CVE-2008-0165 Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.
MediumCVSS 4.3
EPSS 0.64%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ikiwiki | <= 2.41 | No fix listed |
| debian/ikiwiki(Debian:12) | < 2.42 | 2.42 |
| debian/ikiwiki(Debian:13) | < 2.42 | 2.42 |
| debian/ikiwiki(Debian:14) | < 2.42 | 2.42 |
References
- bugs.debian.org
- ikiwiki.info
- 29907 third-party-advisory
- 29932 third-party-advisory
- DSA-1553 vendor-advisory
- ADV-2008-1297 vdb-entry
- ikiwiki-change-password-csrf(41904) vdb-entry
- Debian Security Tracker CVE-2008-0165 vendor-advisory