CVE-2014-8762

Fixed in a distro release EPSS 2%

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

Published 2014-10-22 · CVE record · OSV

Products: dokuwiki

Distro releases