CVE-2021-40904

CVE-2021-40904 - CheckMk의 Dokuwiki 내장 애플리케이션을 통한 RCE 애플리케이션: CheckMK 관리 웹 콘솔 소프트웨어 버전: 1.5.0 1.5.0p25 공격 유형: RCE 해결 방법: 버전 1.6 이상으로 업그레이드하십시오. 요약: CheckMk Raw Edition버전 1.5.0 1.5.0p25의 웹 관리 콘솔은 기본 설치된 웹 애플리케이션 Dokuwiki의 잘못된 구성으로 인해 PHP 코드 삽입이 가능합니다. 이를 통해 원격 코드 실행이 이루어집니다. 성공적인 공격을 위해서는 웹 관리 인터페이...

DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting

DokuWiki 2025-05-14a 'Librarian' contains a stored XSS caused by improper sanitization of the 'q' parameter, letting remote attackers execute arbitrary scripts, exploit requires no special privileges. id: CVE-2025-61224 info: name: DokuWiki = 2025-05-14a Librarian - Reflected Cross-Site Scripting...

DokuWiki - Cross-Site Scripting

DokuWiki through 2017-02-19b contains a cross-site scripting vulnerability in the DATEAT parameter to doku.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

CVE-2024-42758

CVE-2024-42758 Dokuwiki오픈 소스 위키 엔진에서 indexmenu 플러그인이 사용 및 활성화된 v2024-01-05 버전에 교차 사이트 스크립팅XSS 취약점이 존재합니다. 악의적인 공격자는 예를 들어 기존 페이지를 생성하거나 편집할 때 XSS 페이로드를 입력하여 Dokuwiki에서 XSS를 트리거할 수 있으며, 이는 Dokuwiki 설계의 특성상 .txt 파일에 저장되어 저장형 XSS를 발생시킵니다. https://vulners.com/cve/CVE-2024-42758 취약한 Dokuwiki 페이지:...

[SECURITY] Fedora 45 Update: dokuwiki-20260714c-1.fc45

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

[SECURITY] Fedora 43 Update: dokuwiki-20250514b-6.fc43

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

[SECURITY] Fedora 44 Update: dokuwiki-20250514b-8.fc44

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

Fedora 43 : dokuwiki (2026-046b69d591)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-046b69d591 advisory. Backport object injection RCE fix - see https://github.com/dokuwiki/dokuwiki/issues/4752 Tenable has extracted the preceding description block directly from...

Fedora 44 : dokuwiki (2026-9bbb604ea2)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9bbb604ea2 advisory. Backport object injection RCE fix - see https://github.com/dokuwiki/dokuwiki/issues/4752 Tenable has extracted the preceding description block directly from...

Fedora 45 : dokuwiki (2026-2ec7f70c76)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2ec7f70c76 advisory. Update to version 2026-07-14c security hotfix update - see https://github.com/dokuwiki/dokuwiki/issues/4752 Tenable has extracted the preceding description...

[SECURITY] Fedora 44 Update: dokuwiki-20250514b-7.fc44

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

[SECURITY] Fedora 43 Update: dokuwiki-20250514b-5.fc43

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

Fedora 44 : dokuwiki (2026-f899239e0c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f899239e0c advisory. Backport disableactions mechanism bypass fix Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Fedora 43 : dokuwiki (2026-99a0f106c9)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-99a0f106c9 advisory. Backport disableactions mechanism bypass fix Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

DokuWiki Revert plugin renders changelog usernames unescaped, leading to stored XSS

DokuWiki Revert plugin renders changelog usernames unescaped, leading to stored XSS Vulnerability Overview DokuWiki's built-in revert admin plugin, when listing changelog edit records, HTML-escapes edit summaries but outputs the changelog user field verbatim. For authentication backends that do n...

DokuWiki authplain modifyUser regex injection can delete other users' accounts

DokuWiki authplain modifyUser regex injection can delete other users' accounts Vulnerability Overview When DokuWiki uses the built-in authplain authentication backend, user profiles are stored in the users.auth.php file, and the modifyUser operation triggered by a user updating their profile...

[SECURITY] Fedora 43 Update: dokuwiki-20250514b-4.fc43

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

[SECURITY] Fedora 44 Update: dokuwiki-20250514b-6.fc44

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creati ng documentation of any kind. It has a simple but powerful syntax which makes su re the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

Fedora 43 : dokuwiki (2026-68853bb50c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-68853bb50c advisory. Backport some security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

Fedora 44 : dokuwiki (2026-d37b1b981a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d37b1b981a advisory. Backport some security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...