Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instead of the user web, which can then be used to associate the user's login name with the WikiName of a member of the TWikiAdminGroup.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Twiki 主页创建 特权提升漏洞
Vulnerability Description
TWiki可以使远程攻击者借助含有经过修改的action属性的TWiki.TWikiRegistration表单，获得Twiki管理员权限。该属性引用Sandbox web而非用户web,随后，可用于将用户的登录名与TWikiAdminGroup会员的WikiName相结合。
CVSS Information
N/A
Vulnerability Type
N/A