The host is running TWiki and is prone to Cross-Site Request Forgery vulnerability.

Successful exploitation will allow attacker to gain administrative privileges on the target application and can cause CSRF attack. Impact Level: Application

Upgrade to TWiki version 4.3.2 or later, For updates refer to http://twiki.org/cgi-bin/view/Codev/DownloadTWiki

Attack can be done by tricking an authenticated TWiki user into visiting a static HTML page on another side, where a Javascript enabled browser will send an HTTP POST request to TWiki, which in turn will process the request as the TWiki user.

TWiki version prior to 4.3.2

• http://www.openwall.com/lists/oss-security/2010/08/02/17
• http://www.openwall.com/lists/oss-security/2010/08/03/8

---

Updated on 2017-03-28