CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
82.3%
CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the media parameter. NOTE: this issue can be leveraged for XSS attacks.
Vendor | Product | Version | CPE |
---|---|---|---|
andreas_gohr | dokuwiki | release+2006-03-09 | cpe:/a:andreas_gohr:dokuwiki:release+2006-03-09::: |
andreas_gohr | dokuwiki | release+2006-03-09e | cpe:/a:andreas_gohr:dokuwiki:release+2006-03-09e::: |