3 matches found
Debian DLA-1716-1 : ikiwiki security update
The ikiwiki maintainers discovered that the aggregate plugin did not use LWPx::ParanoidAgent. On sites where the aggregate plugin is enabled, authorized wiki editors could tell ikiwiki to fetch potentially undesired URIs even if LWPx::ParanoidAgent was installed : local files via file: URIs other...
7.5CVSS7.3AI score0.01699EPSS
SaveExploits0References3
[SECURITY] [DLA 1716-1] ikiwiki security update
Package : ikiwiki Version : 3.20141016.4+deb8u1 CVE ID : CVE-2019-9187 The ikiwiki maintainers discovered that the aggregate plugin did not use LWPx::ParanoidAgent. On sites where the aggregate plugin is enabled, authorized wiki editors could tell ikiwiki to fetch potentially undesired URIs even ...
7.5CVSS7.5AI score0.01699EPSS
SaveExploits0
20