CVE-2016-10026

ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI…

published February 13, 2017

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI interface enabled, which allows remote attackers to revert certain changes by leveraging permissions to change the page before the revision was made.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02129 · 81.7th percentile
Published
2017-02-13T18:00Z
EPSS history
Timeline
  • 13 FEB 18:00Z
    ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI…
    cvelistv5