Description
Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users. NOTE: this issue has been disputed by the vendor, who states that it is resultant from CVE-2012-2129: "the exploit code simply uses the XSS hole to extract a valid CSRF token."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dokuwiki | 0.0.20120125a-1 | — |
| Debian 13 | dokuwiki | 0.0.20120125a-1 | — |
| Debian 12 | dokuwiki | 0.0.20120125a-1 | — |
References
- [oss-security] 20120422 Re: CVE Request -- DokuWiki: XSS and CSRF due improper escaping of 'target' parameter in preprocessing edit form data mailing-list
- 53041 vdb-entry
- 20120417 DokuWiki Ver.2012/01/25 CSRF Add User Exploit mailing-list
- dokuwiki-doku-xss(74907) vdb-entry
- [oss-security] 20120422 CVE Request -- DokuWiki: XSS and CSRF due improper escaping of 'target' parameter in preprocessing edit form data mailing-list
- 48848 third-party-advisory
- http://bugs.dokuwiki.org/index.php?do=details&task_id=2488
- http://ircrash.com/uploads/dokuwiki.txt
- https://bugzilla.redhat.com/show_bug.cgi?id=815122