CVE-2024-33103

2024-04-3000:00:00

ubuntu.com

arbitrary file upload

dokuwiki 2024-02-06a

media manager

svg file

exploitability

misconfiguration

unix

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

DISPUTED An arbitrary file upload vulnerability in the Media Manager
component of DokuWiki 2024-02-06a allows attackers to execute arbitrary
code by uploading a crafted SVG file. NOTE: as noted in the 4267 issue
reference, there is a position that exploitability can only occur with a
misconfiguration of the product.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchdokuwiki< anyUNKNOWN
ubuntu20.04noarchdokuwiki< anyUNKNOWN
ubuntu22.04noarchdokuwiki< anyUNKNOWN
ubuntu23.10noarchdokuwiki< anyUNKNOWN
ubuntu24.04noarchdokuwiki< anyUNKNOWN
ubuntu16.04noarchdokuwiki< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	dokuwiki	< any	UNKNOWN
ubuntu	20.04	noarch	dokuwiki	< any	UNKNOWN
ubuntu	22.04	noarch	dokuwiki	< any	UNKNOWN
ubuntu	23.10	noarch	dokuwiki	< any	UNKNOWN
ubuntu	24.04	noarch	dokuwiki	< any	UNKNOWN
ubuntu	16.04	noarch	dokuwiki	< any	UNKNOWN