CVE-2009-1434: Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack t...

Security readout for executives and security teams

Older Foswiki versions could let a malicious website trick a logged-in user into making unintended wiki changes. The described impact includes page edits, permission changes, and group membership changes. Business risk depends on whether Foswiki is exposed and who has elevated access. Exposure is likely limited to organizations still running Foswiki before 1.0.5, especially internet-accessible or broadly used internal wikis where authenticated users can edit pages, permissions, or group memberships. Prioritize remediation if Foswiki is internet-facing, business-critical, or used by privileged users. If no Foswiki deployment exists, record non-applicability and close the item. Mitigation focus: Upgrade Foswiki instances older than 1.0.5 to 1.0.5 or a supported later release.; Review the Foswiki advisory for any version-specific guidance or compensating controls.; Restrict high-privilege wiki accounts to users who need administrative rights..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.