Access Vulnerability in DokuWiki Affects Image Retrieval
CVE-2014-8761

Currently unrated

Key Information:

Vendor

Dokuwiki

Status
Dokuwiki
Vendor
CVE Published:
22 October 2014

What is CVE-2014-8761?

In DokuWiki versions prior to 2014-05-05a, a flaw in the inc/template.php file permits unauthorized remote attackers to gain access to arbitrary images. This vulnerability arises because the system only verifies access permissions for the root namespace, overlooking other namespaces and allowing attackers to exploit media file details through an ajax call. Consequently, this may lead to unauthorized disclosure of sensitive images hosted within the DokuWiki environment.

References

http://secunia.com/advisories/61983
third-party-advisoryx_refsource_SECUNIA
http://advisories.mageia.org/MGASA-2014-0438.html
x_refsource_CONFIRM
https://github.com/splitbrain/dokuwiki/issues/765
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.