CERT24GHSA-56wp-34hq-q74fLoading data…
CERT24Threat Observatory
Period

GHSA-56wp-34hq-q74f

YesWiki before version 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers to select arbitrary templates within the @bazar Twig namespace through the template GET parameter. This can force unintended layouts and cause page defacement for visitors who follow a crafted link.

← Back to intelligence

GHSA-56wp-34hq-q74f

YesWiki before version 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers to select arbitrary templates within the @bazar Twig namespace through the template GET parameter. This can force unintended layouts and cause page defacement for visitors who follow a crafted link.