CVE-2014-7236: Critical severity twiki vulnerability
Published Feb 17, 2020
·Updated
Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.
Affected Software
7 affected components
Twiki TWiki>=4.0<=4.0.5
Twiki TWiki>=4.1<=4.1.2
Twiki TWiki>=4.2<=4.2.4
Twiki TWiki>=4.3<=4.3.2
Twiki TWiki>=5.0<=5.0.2
Twiki TWiki>=5.1.0<=5.1.4
Twiki TWiki=6.0
Event History
Feb 17, 2020
CVE Published
via MITRE·09:14 PM
Data Sourced
via MITRE·09:14 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2014-7236.
2
What is the severity of CVE-2014-7236?
The severity of CVE-2014-7236 is critical with a CVSS score of 9.1.
3
How does CVE-2014-7236 affect Twiki versions?
CVE-2014-7236 affects Twiki versions 4.0 to 6.0.
4
How can remote attackers exploit CVE-2014-7236?
Remote attackers can exploit CVE-2014-7236 by executing arbitrary Perl code via the debugenableplugins parameter.
5
Are there any references for CVE-2014-7236?
Yes, you can find references for CVE-2014-7236 at the following links: [1] [2] [3].