Skip to content
OpenAdvisories

Package · Debian

dokuwiki

37 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    DokuWiki before 2026-07-14c PHP Object Injection via Draft Race Condition

    DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file contents to unserialize() without restricting allowed classes. Authenticated users with edit rights can race concurrent draft rewrites to…