CVE-2017-14924: Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 L...

Security readout for executives and security teams

CVE-2017-14924 is a Tiki wiki CSRF issue where a normal authenticated user could become an administrator if an administrator opened a crafted wiki page containing an IMG element. The business risk is unauthorized administrative control of an affected collaboration site. Exposure is most likely where affected Tiki versions allow authenticated users to create or edit wiki pages that administrators may view. Public exploit status and CVSS data are not provided in the source bundle. Prioritize remediation for any active Tiki site on the affected branches, especially externally reachable or broadly editable wikis. The issue can lead to administrator takeover, even though public exploitation evidence is not cited. Mitigation focus: Upgrade affected Tiki installations to the fixed branch release or later.; Use Tiki vendor security release guidance for branch-specific updates.; Restrict administrator viewing of user-authored wiki pages until patched..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.