Description
CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the media parameter. NOTE: this issue can be leveraged for XSS attacks.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dokuwiki | 0.0.20061106-1 | — |
| Debian 13 | dokuwiki | 0.0.20061106-1 | — |
| Debian 12 | dokuwiki | 0.0.20061106-1 | — |
References
- 31620 vdb-entry
- http://sla.ckers.org/forum/read.php?3%2C880%2C1361#msg-1361
- 24853 third-party-advisory
- 23926 third-party-advisory
- 22236 vdb-entry
- dokuwiki-fetch-response-splitting(31930) vdb-entry
- ADV-2007-0357 vdb-entry
- GLSA-200704-08 vendor-advisory