CVE-2014-8763

Fixed in a distro release EPSS 3%

DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a password starting with a null (\0) character and a valid user name, which triggers an unauthenticated bind.

Published 2014-10-22 · CVE record · OSV

Products: dokuwiki, mageia_project mageia

Distro releases