Debian Security Advisory 1639-1 – It was discovered that twiki, a web based collaboration platform, didn’t properly sanitize the image parameter in its configuration script. This could allow remote users to execute arbitrary commands upon the system, or read any files which were readable by the webserver user.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/70131/dsa-1639-1.txt
Source: https://packetstormsecurity.com/files/70131/Debian-Linux-Security-Advisory-1639-1.html