CVE-2006-6889: Freestyle Wiki

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request for config/user.dat.

Affected products

• Freestyle Freestyle Wiki: up to and including 3.6.2

Published 2006-12-31. Last modified 2026-06-16.