CVE-2006-1387

CVE-2006-1387 describes a denial-of-service vulnerability affecting TWiki versions 4.0, 4.0.1, and 20010901 through 20040904. Authenticated users with edit rights can exploit this by creating a recursive INCLUDE by URL statement, leading to infinite recursion, high CPU, and memory consumption. This vulnerability has a CVSS score of 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P), indicating a network-based attack with low complexity, requiring authentication, and resulting in partial availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.