oss-sec mailing list archives

CVE request: DokuWiki privilege escalation in RPC API


From: Sebastian Pipping <sebastian () pipping org>
Date: Mon, 02 Mar 2015 03:34:49 +0100

Hello!


DokuWiki maintenance release 2014-09-29c (of 2015-02-25) has this change
log entry [1]:

  "Security Hotfix 2014-09-29c: fixes privilege escalation in RPC API"

The related issue at GitHub is

  https://github.com/splitbrain/dokuwiki/issues/1056

and the related commit is


https://github.com/splitbrain/dokuwiki/commit/4970ad24ce49ec76a0ee67bca7594f918ced2f5f

Best,



Sebastian


[1] https://www.dokuwiki.org/changes


Current thread: