PT-2018-6688 · Andreas Gohr · Dokuwiki

Lc

·

Publicado

2018-02-03

·

Atualizado

2018-07-07

·

CVE-2017-18123

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: DokuWiki versions prior to 2017-02-19e
Description: The issue arises from the improper encoding of user input in the call parameter of the "/lib/exe/ajax.php" API endpoint. This leads to a reflected file download issue, allowing remote attackers to execute arbitrary programs.
Recommendations: For versions prior to 2017-02-19e, update to a version that properly encodes user input in the call parameter of the "/lib/exe/ajax.php" endpoint to prevent reflected file download attacks. As a temporary workaround, consider restricting access to the "/lib/exe/ajax.php" endpoint until a patch is available.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-18123
DLA-1269-1
DLA-1413-1

Produtos afetados

Dokuwiki