DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.
Loading...
Loading...
DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.
March 30, 2015
May 6, 2026
See which npm, PyPI, Go, and Maven packages are affected by CVE-2015-2172
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.