Security Flaw in DokuWiki Prior Versions Exposes Users to Phishing Risks
CVE-2016-7965

6.5MEDIUM

Key Information:

Vendor

Dokuwiki

Status
Dokuwiki
Vendor
CVE Published:
31 October 2016

What is CVE-2016-7965?

DokuWiki versions released on or before June 26, 2016, are prone to a security flaw that leverages the $_SERVER[HTTP_HOST] variable instead of the configured base URL in the password-reset functionality. This oversight allows a remote, unauthenticated attacker to manipulate the URL's hostname via the HTTP Host header, potentially leading to phishing schemes. This vulnerability is particularly exploitable in configurations where multiple domains are served by the same web server and the Host header is not adequately validated.

References

http://www.securityfocus.com/bid/94237
vdb-entryx_refsource_BID
https://github.com/splitbrain/dokuwiki/issues/1709
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.