CVE-2015-2172 in DokuWiki
摘要 (英语)
DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permission for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
预定
2015-03-01
披露
2015-03-30
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 69241 | DokuWiki RPC API 权限提升 | 284 | 未经证实 | 官方修复 | CVE-2015-2172 |