GCVE - cpe:2.3:a:wikmd_project:wikmd:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wikmd_project:wikmd:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wikmd Project (`959bbffc-b0b9-5d40-9f5f-03c323be30cf`)
Product	Wikmd (`01daab20-db93-5fe1-969d-9eaeb3a8dc71`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/linbreux/wikmd`	purl2cpe	2026-06-01 10:12:14.387017

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36081`	vulnerable	2026-06-08 05:46:06.297325	Wikmd vulnerable to Local File Enumeration when accessing /list HIGH (7.5) Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, Wikmd is vulnerable to path traversal when accessing `/list/<path:folderpath>` and discloses lists of files located on the server including sensitive data. Version 1.7.1 fixes this issue. Published: 2022-09-07T21:00:13.000Z Updated: 2025-04-23T17:13:43.244Z Open on db.gcve.eu Reference links https://github.com/Linbreux/wikmd/security/advisories/GHSA-w4cf-92x9-v8w2 https://github.com/Linbreux/wikmd/commit/8d1f94ec86b5b6c3df8ef10051facfb511a78450	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36080`	vulnerable	2026-06-08 05:46:06.296655	Wikmd Cross-site Scripting vulnerability MEDIUM (6.1) Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, an attacker could capture user's session cookies or execute malicious Javascript when a victim edits a markdown file. Version 1.7.1 fixes this issue. Published: 2022-09-07T21:00:18.000Z Updated: 2025-04-23T17:13:36.748Z Open on db.gcve.eu Reference links https://github.com/Linbreux/wikmd/security/advisories/GHSA-9m4m-6gqx-gfj3 https://github.com/Linbreux/wikmd/commit/259412c47d64d5b85980f95345179fbf05927798	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.