CVE-2008-0165: Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify us...

Security readout for executives and security teams

CVE-2008-0165 is a CSRF flaw in Ikiwiki before 2.42. If a logged-in user is tricked into sending a forged web request, an attacker could change that user’s preferences, including password-related settings. The business risk is account compromise or unauthorized wiki changes where legacy Ikiwiki remains deployed. Exposure is most likely in old self-hosted Ikiwiki installations, especially Debian-era deployments that were not updated after the 2008 advisory. Modern environments are only exposed if they still run Ikiwiki before 2.42 or an unpatched downstream package. Treat this as a legacy cleanup issue with moderate urgency. Prioritize any internet-facing or business-critical Ikiwiki instance, because successful abuse could compromise user accounts or alter wiki content without exploiting the server directly. Mitigation focus: Upgrade Ikiwiki to version 2.42 or a vendor package containing the CSRF fix.; Apply relevant Debian or distribution security updates for Ikiwiki where package-managed.; Restrict access to legacy Ikiwiki editing and preference surfaces until patched..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.