CVE-2014-8762

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access...

5.0 MediumFix available

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

Exploit likelihood

2.37%Up 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

Record: CVE-2014-8762
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

Record: CVE-2014-8762
Updated: 2026-11-02

EUVDEUVD-2014-8593 No score

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

Record: EUVD-2014-8593
Updated: 2026-11-03

GitHub AdvisoriesGHSA-x2r2-v685-g232 No score

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access...

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

Record: GHSA-x2r2-v685-g232
Weakness: CWE-200
Updated: 2026-11-02

OSV No score

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

Record: CVE-2014-8762
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-8762 No score

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

Record: DEBIAN-CVE-2014-8762
Updated: 2026-11-02

OSVMGASA-2014-0438 No score

Updated dokuwiki packages fix security vulnerabilities

inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace, which allows remote attackers to access arbitrary images via a media file details ajax call (CVE-2014-8761).

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter (CVE-2014-8762).

DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a password starting with a null (\0) character and a valid user name, which triggers an unauthenticated bind (CVE-2014-8763).

DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null (\0) character, which triggers an anonymous bind (CVE-2014-8764).

Record: MGASA-2014-0438
Updated: 2026-11-02

Affected products

dokuwiki

Affected packages

Affected packages
Package	Affected	Fixed
`dokuwiki` Debian:12	before 0.0.20140505.a+dfsg-1	0.0.20140505.a+dfsg-1
`dokuwiki` Debian:13	before 0.0.20140505.a+dfsg-1	0.0.20140505.a+dfsg-1
`dokuwiki` Debian:14	before 0.0.20140505.a+dfsg-1	0.0.20140505.a+dfsg-1
`dokuwiki` Debian:7 From an advisory covering 4 CVEs	before 0.0.20120125b-2+deb7u1, plus listed versions 0.0.20120125b-2	0.0.20120125b-2+deb7u1
`dokuwiki` Mageia:3 From an advisory covering 4 CVEs	before 20140929-1.1.mga3	20140929-1.1.mga3
`dokuwiki` Mageia:4 From an advisory covering 4 CVEs	before 20140929-1.1.mga4	20140929-1.1.mga4

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8762 is a medium vulnerability (CVSS 5.0) in Dokuwiki, published October 22, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 83rd percentile. Fixed in dokuwiki 0.0.20140505.a+dfsg-1.

References

Show 7 moreShow less