Skip to content
OpenAdvisories
High · 7.5 CVE-2022-36081 EUVD-2022-38835

Wikmd vulnerable to Local File Enumeration when accessing /list

Published Sep 7, 2022 · Updated Apr 23, 2025 · Assigned by GitHub_M

Description

Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, Wikmd is vulnerable to path traversal when accessing `/list/<path:folderpath>` and discloses lists of files located on the server including sensitive data. Version 1.7.1 fixes this issue.

Affected products

VendorProductAffectedFixed
Linbreux wikmd < 1.7.1 —

References