Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ikiwiki: cross-site request forgery

Package(s):

ikiwiki

CVE #(s):

CVE-2008-0165

Created:

April 21, 2008

Updated:

June 2, 2008

Description:

From the Debian advisory:

It has been discovered that ikiwiki, a Wiki implementation, does not guard password and content changes against cross-site request forgery (CSRF) attacks.

Alerts:

Debian	DSA-1553-2	2008-06-01
Debian	DSA-1553-1	2008-04-20

(Log in to post comments)