Description
The RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to obtain the names, and possibly revision notes and dates, of private pages via RSS feeds.
References
- 20070509 Clarification on WikkaWikki RSS feed severity (CVE-2007-2552) mailing-list
- ADV-2007-1725 vdb-entry
- http://wikkawiki.org/WikkaReleaseNotes
- 23894 vdb-entry
- http://wush.net/trac/wikka/ticket/305
- 35827 vdb-entry
- 25181 third-party-advisory