CVE-2010-4215: Foswiki

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup.

Affected products

• Foswiki Foswiki: version 1.1.0 only; version 1.1.1 only

Published 2010-11-17. Last modified 2026-06-16.