Описание
Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, Wikmd is vulnerable to path traversal when accessing /list/<path:folderpath> and discloses lists of files located on the server including sensitive data. Version 1.7.1 fixes this issue.
Ссылки
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.7.1 (исключая)
cpe:2.3:a:wikmd_project:wikmd:*:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00414
Низкий
7.5 High
CVSS3
Дефекты
CWE-22
CWE-22
EPSS
Процентиль: 61%
0.00414
Низкий
7.5 High
CVSS3
Дефекты
CWE-22
CWE-22