CVE-2014-8762

Name of the Vulnerable Software and Affected Versions DokuWiki versions prior to 2014-05-05a

Description The issue allows remote attackers to access arbitrary images through a manipulated namespace in the ns parameter of the ajax mediadiff function.

Recommendations For versions prior to 2014-05-05a, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the ajax mediadiff function until a patch is available. Avoid using the ns parameter in the affected function until the issue is resolved.