CVE-2017-18123

Published: Feb 3, 2018Modified: Nov 21, 2024

8.6

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 6.0

Source: NVD

Description

The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs.

Affected (2)

Products: Dokuwiki: Dokuwiki · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dokuwiki Dokuwiki	Up to 2017-02-19e

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

https://github.com/splitbrain/dokuwiki/commit/238b8e878ad48f370903465192b57c2072f65d86

Source: cve@mitre.org

Patch

https://github.com/splitbrain/dokuwiki/issues/2029

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/splitbrain/dokuwiki/pull/2019

Source: cve@mitre.org

Issue Tracking

https://hackerone.com/reports/238316

Source: cve@mitre.org

Permissions Required

https://lists.debian.org/debian-lts-announce/2018/02/msg00004.html

Source: cve@mitre.org

Issue TrackingMailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2018/07/msg00004.html

Source: cve@mitre.org

https://vulnhive.com/2018/000004

Source: cve@mitre.org

ExploitIssue TrackingPatchThird Party Advisory

https://github.com/splitbrain/dokuwiki/commit/238b8e878ad48f370903465192b57c2072f65d86