PT-2017-12587 · Dokuwiki · Dokuwiki

Trichimtrich · Publicado 2017-08-06 · Atualizado 2018-01-11 · CVE-2017-12583

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions DokuWiki versions prior to 2017-02-19b

Description The issue concerns an XSS vulnerability in the at parameter, also known as the DATE AT variable, which is used in the "doku.php" endpoint.

Recommendations For versions prior to 2017-02-19b, consider restricting access to the at parameter in the doku.php endpoint until a fix is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-12583

MGASA-2018-0067

Produtos afetados

Dokuwiki

Referências · 12

• 🔥 https://github.com/splitbrain/dokuwiki/issues/2061 · Exploit
• https://advisories.mageia.org/MGASA-2018-0067.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2018-0067 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-12583 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-12583 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-12583 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12583 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-12583 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2017-12583 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=22323 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-12583 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-12583 · Aviso do Fabricante