CVE-2012-2129
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote...
CVE-2012-2129 is a medium vulnerability (CVSS 4.3) in Andreas Gohr Dokuwiki, published August 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. Fixed in dokuwiki 0.0.20120125a-1.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 2.56%EPSS, 85th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.0.20120125a-1dokuwiki +2 more
Description
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
CVE-2012-2129- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
CVE-2012-2129- Updated
- 2026-11-02
EUVDEUVD-2012-2129No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
EUVD-2012-2129- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2423-333r-g3m8No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote...
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
GHSA-2423-333r-g3m8- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVNo score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
CVE-2012-2129- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2129No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
DEBIAN-CVE-2012-2129- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2129No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
UBUNTU-CVE-2012-2129- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
openwall.com/lists/oss-security/2012/04/23/1
securityfocus.com/bid/53041
bugs.gentoo.org/show_bug.cgi?id=412891
bugzilla.redhat.com/show_bug.cgi?id=815122
seclists.org/bugtraq/2012/Apr/121
github.com/splitbrain/dokuwiki/commit/ff71173477e54774b5571015d49d944f51cb8a26
Show 10 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/74907
ircrash.com/uploads/dokuwiki.txt
secunia.com/advisories/48848
bugs.dokuwiki.org/index.php?do=details&task_id=2487
nvd.nist.gov/vuln/detail/CVE-2012-2129
security-tracker.debian.org/tracker/CVE-2012-2129
ubuntu.com/security/CVE-2012-2129
cve.org/CVERecord?id=CVE-2012-2129