writeups.xyz / Critical Foswiki Vulnerablities: A Logic Error Turned Remote Code Execution

Submitter : c2a

Date: 11 July 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Privilege Escalation
• Path Traversal

Programs :

• Foswiki

Authors :

• Christian Pöschl

Link :
https://herolab.usd.de/en/critical-foswiki-vulnerablities-a-logic-error-turned-remote-code-execution/