CVE-2009-1339: CSRF
Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1339?
CVE-2009-1339 has a medium severity rating due to its potential for exploitation through cross-site request forgery.
How do I fix CVE-2009-1339?
To fix CVE-2009-1339, upgrade to TWiki version 4.3.1 or later.
What types of users are affected by CVE-2009-1339?
CVE-2009-1339 affects remote authenticated users who can exploit CSRF vulnerabilities to hijack authentication.
What software versions are vulnerable to CVE-2009-1339?
TWiki versions prior to 4.3.1, including 4.2.x and 4.1.2, are vulnerable to CVE-2009-1339.
What is the impact of CVE-2009-1339?
The impact of CVE-2009-1339 allows attackers to potentially take control of user sessions and perform unauthorized actions.