CVE-2016-10026

Name of the Vulnerable Software and Affected Versions ikiwiki version 3.20161219

Description The issue arises from inadequate checking of revision changes to access permissions for a page on sites utilizing the git and recentchanges plugins with the CGI interface enabled. This allows remote attackers to revert specific changes by exploiting permissions to modify the page before the revision was made.

Recommendations For ikiwiki version 3.20161219, consider disabling the CGI interface or restricting access to the git and recentchanges plugins as a temporary workaround until a patch is available.