CVE-2014-8762

Published October 22nd, 2014

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECT

Description

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

dokuwiki/dokuwiki

The DokuWiki Open Source Wiki Engine

GitHub

4.65K