PatchTheCVEikiwiki vulnerabilities
Recent CVEs affecting ikiwiki products. 7 tracked.
ikiwiki has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2019-11-21. Highest priority: CVE-2017-0356 (score 71/100).
- CVE-2019-9187 HIGH 7.5 UPGRADE ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin
- CVE-2017-0356 CRITICAL 9.8 UPGRADE MITIGATE A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of
- CVE-2016-9646 MEDIUM 5.3 UPGRADE MITIGATE ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API
- CVE-2016-9645 MEDIUM 6.5 UPGRADE The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert w
- CVE-2016-10026 HIGH 7.5 DOWNGRADE ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites wi
- CVE-2015-2793 MEDIUM 6.1 UPGRADE MITIGATE Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows
- CVE-2010-1673 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbi
FAQ
How do I fix ikiwiki vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ikiwiki being exploited right now?
None of the tracked ikiwiki CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ikiwiki CVE should I patch first?
CVE-2017-0356 currently ranks highest (71/100): A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of .