CVE-2013-1751: Twiki

Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days.

TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.

Affected products

• Twiki Twiki: before 5.1.4 (fixed in 5.1.4)

Published 2019-11-07. Last modified 2026-06-16.