Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-9253
HistoryDec 17, 2014 - 12:00 a.m.

CVE-2014-9253

2014-12-1700:00:00
ubuntu.com
ubuntu.com
9

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.4%

JSON

The default file type whitelist configuration in conf/mime.conf in the
Media Manager in DokuWiki before 2014-09-29b allows remote attackers to
execute arbitrary web script or HTML by uploading an SWF file, then
accessing it via the media parameter to lib/exe/fetch.php.

Notes

Author Note
seth-arnold update from upstream just disables uploads for swf files

Related

prion 1
cve 1
debiancve 1
openvas 4
mageia 1
archlinux 1
fedora 3
nessus 4
securityvulns 2
prion
prion
Default credentials
2014-12-17 18:59:00
cve
cve
CVE-2014-9253
2014-12-17 18:59:00
debiancve
debiancve
CVE-2014-9253
2014-12-17 18:59:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0540)
2022-01-28 00:00:00
Fedora Update for dokuwiki FEDORA-2015-3186
2015-03-27 00:00:00
Fedora Update for dokuwiki FEDORA-2015-3079
2015-07-07 00:00:00
mageia
mageia
Updated docuwiki package fixes CVE-2014-9253
2014-12-19 18:17:07
archlinux
archlinux
dokuwiki: cross-site scripting
2014-12-16 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: dokuwiki-0-0.24.20140929c.fc21
2015-03-26 21:44:25
[SECURITY] Fedora 22 Update: dokuwiki-0-0.24.20140929c.fc22
2015-03-26 22:07:58
[SECURITY] Fedora 20 Update: dokuwiki-0-0.24.20140929c.fc20
2015-03-26 21:39:47
nessus
nessus
Fedora 21 : dokuwiki-0-0.24.20140929c.fc21 (2015-3186)
2015-03-27 00:00:00
Fedora 22 : dokuwiki-0-0.24.20140929c.fc22 (2015-3079)
2015-03-27 00:00:00
Fedora 20 : dokuwiki-0-0.24.20140929c.fc20 (2015-3211)
2015-03-27 00:00:00
securityvulns
securityvulns
[ MDVSA-2015:185 ] dokuwiki
2015-05-12 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2015-05-12 00:00:00

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.4%

JSON
Related for UB:CVE-2014-9253
prion1cve1debiancve1openvas4mageia1archlinux1fedora3nessus4securityvulns2