PT-2015-7889 · Dokuwiki · Dokuwiki

Publicado 2015-03-27 · Atualizado 2015-03-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions DokuWiki versions prior to 20140929d

Description The issue is related to a cross-site scripting (XSS) problem in the user manager. A registered user can edit their own name to include malicious JavaScript code, which is executed when a super user tries to edit the user via the user manager. This occurs because the user's details were not properly escaped in the user manager's edit form.

Recommendations For versions prior to 20140929d, update to version 20140929d or later to resolve the issue.

Identificadores relacionados

MGASA-2015-0118

Produtos afetados

Dokuwiki

Referências · 5

• https://github.com/splitbrain/dokuwiki/issues/1081 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0118 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=15539 · Nota
• https://dokuwiki.org/changes#release_2014-09-29d_hrun · Nota
• https://advisories.mageia.org/MGASA-2015-0118.html · Nota de Segurança