MGASA-2015-0118
Updated dokuwiki package fixes security vulnerability
DokuWiki before 20140929d is vulnerable to a cross-site scripting (XSS) issue in the user manager. The user's details were not properly escaped in the user manager's edit form. This allows a registered user to edit her own name (using the change profile option) to include malicious JavaScript code. The code is executed when a super user tries to edit the user via the user manager
What each source reports
OSV No score
Updated dokuwiki package fixes security vulnerability
DokuWiki before 20140929d is vulnerable to a cross-site scripting (XSS) issue in the user manager. The user's details were not properly escaped in the user manager's edit form. This allows a registered user to edit her own name (using the change profile option) to include malicious JavaScript code. The code is executed when a super user tries to edit the user via the user manager
- Record
MGASA-2015-0118- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dokuwikiMageia:4 |
before 20140929-1.4.mga4 | 20140929-1.4.mga4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0118 is a vulnerability with no CVSS score yet in dokuwiki, published March 27, 2015. No source lists public exploit code. Fixed in dokuwiki 20140929-1.4.mga4.