CVE-2026-2861

Katalog CVE

CVSS 5.3 · Medium EPSS 0,76%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada foswiki. Skor CVSS 3.1 5.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 2.1.11 is sufficient to fix this issue. The patch is identified as 31aeecb58b64/d8ed86b10e46. Upgrading the affected component is recommended.

Rincian

Terbit di NVD

21 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-284: Improper Access Control

EPSS (30 hari)

0,76% peluang dieksploitasi; lebih tinggi dari 54,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/foswiki/distro/commit/31aeecb58b64 patch
• https://vuldb.com/?id.347101 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.753966 advisory pihak ketiga · vdb entry
• https://foswiki.org/Tasks/Item15600 permissions required
• https://foswiki.org/Tasks/Item15601 permissions required
• https://vuldb.com/?ctiid.347101 permissions required · vdb entry
• http://www.openwall.com/lists/oss-security/2026/03/15/1
• http://www.openwall.com/lists/oss-security/2026/03/16/1
• http://www.openwall.com/lists/oss-security/2026/03/16/3