Directory Traversal Vulnerability in DokuWiki ACL Manager Plugin
CVE-2010-0287

Currently unrated

Key Information:

Vendor

Dokuwiki

Status
Vendor
CVE Published:
15 February 2010

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸฃ EPSS 10%

What is CVE-2010-0287?

A directory traversal vulnerability exists in the ACL Manager plugin of DokuWiki prior to version 2009-12-25b. This flaw allows remote attackers to exploit the 'ns' parameter to traverse directories, potentially exposing the contents of arbitrary directories. As a result, sensitive files may be listed, creating risks for information disclosure. Users are advised to update their DokuWiki installations to safeguard against this exploitation.

References

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.