CVE-2015-2172

Fixed in a distro release EPSS 3%

DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.

Published 2015-03-30 · CVE record · OSV

Products: dokuwiki

Distro releases