dokuwiki

dokuwiki

RubyGemsRubyGems
RubyGemsrubygems.org
RubyGemsrubygems.org
Releases4
Frequency1 year 5 months
Last Release
Downloads8.1K
The DokuWiki library is used for automating interaction with a DokuWiki server.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2026-26477NVD↗
= 2025-05-14b4.3 MEDIUM—

An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php file

CVE-2019-25338NVD↗
= 2018-04-22b5.3 MEDIUM—

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

CVE-2023-34408NVD↗
< 2023-04-04a5.4 MEDIUM—

DokuWiki before 2023-04-04a allows XSS via RSS titles.

CVE-2022-3123NVD↗
< 2022-07-31a6.1 MEDIUM—

Cross-site Scripting (XSS) - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a.

CVE-2022-28919NVD↗
= 2020-07-296.1 MEDIUM4.3 MEDIUM

HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function _generateFilename.