PT-2015-7889 · Dokuwiki · Dokuwiki

Published 2015-03-27 · Updated 2015-03-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions DokuWiki versions prior to 20140929d

Description The issue is related to a cross-site scripting (XSS) problem in the user manager. A registered user can edit their own name to include malicious JavaScript code, which is executed when a super user tries to edit the user via the user manager. This occurs because the user's details were not properly escaped in the user manager's edit form.

Recommendations For versions prior to 20140929d, update to version 20140929d or later to resolve the issue.

Related Identifiers

MGASA-2015-0118

Affected Products

Dokuwiki

References · 5

• https://osv.dev/vulnerability/MGASA-2015-0118 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0118.html · Security Note
• https://github.com/splitbrain/dokuwiki/issues/1081 · Note
• https://bugs.mageia.org/show_bug.cgi?id=15539 · Note
• https://dokuwiki.org/changes#release_2014-09-29d_hrun · Note