Description
TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.
References
- 19410 third-party-advisory
- twiki-include-edit-dos(25445) vdb-entry
- http://twiki.org/cgi-bin/view/Codev/SecurityAdvisoryDosAttackWithInclude
- ADV-2006-1116 vdb-entry
- 17267 vdb-entry