CVE-2007-5193

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-04 · updated 2026-06-16

Description

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory (cfg{RCS}{WorkAreaDir}) under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied.

Affected products

Twiki: 4.1.2

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444982
http://osvdb.org/42338
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444982
http://osvdb.org/42338

Get alerted when CVE-2007-5193 or the next vulnerability affects your stack