DokuWiki Vulnerability Allows Remote Access to Arbitrary Images
CVE-2014-8762

Currently unrated

Key Information:

Vendor

Dokuwiki

Status
Dokuwiki
Vendor
CVE Published:
22 October 2014

What is CVE-2014-8762?

The ajax_mediadiff function in DokuWiki allows remote attackers to exploit a vulnerability that facilitates access to arbitrary images through a crafted namespace parameter. This issue impacts users of DokuWiki versions released prior to May 5, 2014, raising significant security concerns for websites utilizing this platform, as it could lead to unauthorized content exposure.

References

http://secunia.com/advisories/61983
third-party-advisoryx_refsource_SECUNIA
http://advisories.mageia.org/MGASA-2014-0438.html
x_refsource_CONFIRM
https://github.com/splitbrain/dokuwiki/issues/765
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.