Approved changes feed: RSS · Atom
cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Dokuwiki (dafc00cf-915f-5194-aa6b-650d88822286) |
|---|---|
| Product | Dokuwiki (8fb4fc32-c8fb-523d-b81e-3d6228795b93) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/dokuwiki |
purl2cpe | 2026-06-01 10:13:04.724883 |
pkg:deb/ubuntu/dokuwiki |
purl2cpe | 2026-06-01 10:13:04.724886 |
pkg:github/splitbrain/dokuwiki |
purl2cpe | 2026-06-01 10:13:04.724889 |
pkg:rpm/fedora/dokuwiki |
purl2cpe | 2026-06-01 10:13:04.724892 |
pkg:rpm/opensuse/dokuwiki |
purl2cpe | 2026-06-01 10:13:04.724895 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-113356 |
vulnerable | 2026-11-03 10:16:27.575941 |
DokuWiki before 2026-07-14c PHP Object Injection via Draft Race Condition
HIGH (7.5)
DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file contents to unserialize() without restricting allowed classes. Authenticated users with edit rights can race concurrent draft rewrites to splice serialized data, instantiating gadgets like MemoryIndex or Installer for arbitrary file write, deletion, and code execution.
Published: 2026-10-20T10:41:40.897Z
Updated: 2026-10-20T16:06:40.238Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26477 |
vulnerable | 2026-06-08 07:53:21.644009 |
Details available
MEDIUM (4.3)
An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php file
Published: 2026-04-03T00:00:00.000Z
Updated: 2026-04-08T18:58:43.482Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33103 |
vulnerable | 2026-06-08 06:37:30.852763 |
Details available
An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by uploading a crafted SVG file. NOTE: as noted in the 4267 issue reference, there is a position that exploitability can only occur with a misconfiguration of the product.
Published: 2024-04-30T00:00:00.000Z
Updated: 2024-08-22T18:40:06.703Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34408 |
vulnerable | 2026-06-08 06:06:25.439771 |
Details available
DokuWiki before 2023-04-04a allows XSS via RSS titles.
Published: 2023-06-05T00:00:00.000Z
Updated: 2025-01-08T19:37:53.561Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3123 |
vulnerable | 2026-06-08 05:47:19.514865 |
Cross-site Scripting (XSS) - Reflected in splitbrain/dokuwiki
MEDIUM (5.4)
Cross-site Scripting (XSS) - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a.
Published: 2022-09-05T10:10:09.000Z
Updated: 2024-08-03T01:00:10.525Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25338 |
vulnerable | 2026-06-08 05:13:42.256981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15474 |
vulnerable | 2026-06-08 05:10:54.525505 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18123 |
vulnerable | 2026-06-08 05:09:10.361139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12980 |
vulnerable | 2026-06-08 05:08:48.219032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12979 |
vulnerable | 2026-06-08 05:08:48.218726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12583 |
vulnerable | 2026-06-08 05:08:47.078345 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7965 |
vulnerable | 2026-06-08 05:08:13.627304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2172 |
vulnerable | 2026-06-08 05:06:27.638970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9253 |
vulnerable | 2026-06-08 05:06:11.230157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8764 |
vulnerable | 2026-06-08 05:06:10.086961 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8763 |
vulnerable | 2026-06-08 05:06:10.084546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8762 |
vulnerable | 2026-06-08 05:06:10.084130 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8761 |
vulnerable | 2026-06-08 05:06:10.083670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2510 |
vulnerable | 2026-06-08 04:58:07.336404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0289 |
vulnerable | 2026-06-08 04:52:01.479314 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0288 |
vulnerable | 2026-06-08 04:52:01.478179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0287 |
vulnerable | 2026-06-08 04:52:01.462636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.