SecBoard
Zurück zur CVE-Übersicht

CVE-2014-8761

MEDIUM(5.0)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Risk Signal Score13/100 — NIEDRIG
  • CVSS 5 — Mittel

EPSS-Score

2%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

5

Technische Schwere

Beschreibung

inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace, which allows remote attackers to access arbitrary images via a media file details ajax call.

Referenzen