CVE-2015-2172

DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain…

published March 30, 2015

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02862 · 86.6th percentile
Published
2015-03-30T14:00Z
EPSS history
Timeline
  • 30 MAR 14:00Z
    DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain…
    cvelistv5