Skip to content
OpenAdvisories

Package · Ubuntu

ikiwiki

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Unscored —
    CVE-2019-9187

    ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact …

    ikiwiki ikiwiki Debian Ubuntu
  • Unscored —
    CVE-2016-9646

    Commit metadata forgery via CGI::FormBuilder context-dependent APIs

    ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata forgery.

    ikiwiki ikiwiki ikiwiki ikiwiki Debian Ubuntu
  • Unscored —
    CVE-2017-0356

    Authentication bypass via repeated parameters

    A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.

    ikiwiki ikiwiki ikiwiki ikiwiki Debian Ubuntu
  • Unscored —
    CVE-2016-9645

    Editing restriction bypass for git revert

    The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229.

    ikiwiki ikiwiki ikiwiki ikiwiki Debian Ubuntu
  • Unscored —
    CVE-2016-10026

    ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the gi…

    ikiwiki ikiwiki Debian Ubuntu
  • Unscored —
    CVE-2016-4561

    Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow re…

    ikiwiki ikiwiki Debian Ubuntu