CVE-2005-2877: Twiki

High severity, CVSS 7.5. EPSS: 70.9% chance of exploitation in the next 30 days.

The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.

Affected products

• Twiki Twiki: version 2000-12-01 only; version 2001-12-01 only; version 2003-02-01 only; version 2004-09-01 only; version 2004-09-02 only

Published 2005-09-16. Last modified 2026-06-16.