CVE-2008-3195

CVE-2008-3195 describes a directory traversal vulnerability in TWiki versions prior to 4.2.3, specifically within the bin/configure script. This flaw allows remote attackers to read arbitrary files by manipulating the 'image' variable in a query string with dot-dot sequences, and potentially execute arbitrary files through unspecified vectors, particularly if a specific installation step is overlooked. With a CVSS score of 6.8 (Medium) and a FAUCET Risk Score of 98/100, the vulnerability is easily exploitable over the network with medium attack complexity, leading to potential partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, exploit code for remote file disclosure (EDB-6269) and remote code execution (EDB-6509) exists on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.