Skip to content
OpenAdvisories

Vendor

perber

4 known vulnerabilities.

Products

leafwiki 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-53528

    FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter

    LeafWiki is a self-hosted wiki. Versions 0.3.0 through 0.10.0 have a path traversal vulnerability in LeafWiki’s asset rename functionality. An authenticated user with editor permissions could move files that are accessible to the LeafWiki server process into …

    perber leafwiki
  • High 8.8
    CVE-2026-53527

    LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update

    LeafWiki is a self-hosted wiki. Versions 0.1.0 through 0.10.0 have a privilege escalation vulnerability in the user update API. An authenticated user could update their own account role and escalate privileges from a regular user, such as `viewer`, to `admin`…

    perber leafwiki