CVE-2016-7964
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a...
CVE-2016-7964 is a high vulnerability (CVSS 8.6) in Dokuwiki, published October 31, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. Fixed in dokuwiki 2024-02-06b+dfsg-7.
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
- Record
CVE-2016-7964- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
CVE List No score
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
- Record
CVE-2016-7964- Updated
- 2026-11-02
EUVDEUVD-2016-8812 No score
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
- Record
EUVD-2016-8812- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-943p-qf6q-5m99
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a...
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
- Record
GHSA-943p-qf6q-5m99- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
OSV
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
- Record
CVE-2016-7964- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-7964
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
- Record
DEBIAN-CVE-2016-7964- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-7964
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
- Record
UBUNTU-CVE-2016-7964- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dokuwikiDebian:12 |
All versions, plus listed versions 0.0.20220731.a-20.0.20220731.a-32024-02-06b+dfsg-0exp12024-02-06b+dfsg-0exp22024-02-06b+dfsg-1 Show 27 moreShow less2024-02-06b+dfsg-22024-02-06b+dfsg-32024-02-06b+dfsg-42024-02-06b+dfsg-52024-02-06b+dfsg-62024-02-06b+dfsg-72024-02-06b+dfsg-82024-02-06b+dfsg-92024-02-06b-0exp12024-02-06b-0exp22024-02-06b-0exp32024-02-06b-0exp42025-05-14+dfsg-12025-05-14.a+dfsg-12025-05-14.a+dfsg-22025-05-14.a+dfsg-32025-05-14.a+dfsg-42025-05-14.b+dfsg-12025-05-14.b+dfsg-22025-05-14.b+dfsg-32025-05-14.b+dfsg-42025-05-14.b+dfsg-52025-05-14.b+dfsg-62026-07-14+dfsg-12026-07-14.a+dfsg-12026-07-14.a+dfsg-22026-07-14a+dfsg-1 |
None known |
dokuwikiDebian:13 |
before 2024-02-06b+dfsg-7 | 2024-02-06b+dfsg-7 |
dokuwikiDebian:14 |
before 2024-02-06b+dfsg-7 | 2024-02-06b+dfsg-7 |
dokuwikiUbuntu:16.04:LTS |
All versions, plus listed versions 0.0.20140929.d-10.0.20140929.d-1ubuntu1 |
None known |
dokuwikiUbuntu:18.04:LTS |
All versions, plus listed versions 0.0.20160626.a-2 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |