CVE

Id
55371  
CVE No.
CVE-2012-2128  
Status
Candidate  
Description
** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users. NOTE: this issue has been disputed by the vendor, who states that it is resultant from CVE-2012-2129: "the exploit code simply uses the XSS hole to extract a valid CSRF token."  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
578564 55371 CVE-2012-2128 BUGTRAQ:20120417 DokuWiki Ver.2012/01/25 CSRF Add User Exploit  View
578565 55371 CVE-2012-2128 URL:http://seclists.org/bugtraq/2012/Apr/121  View
578566 55371 CVE-2012-2128 MLIST:[oss-security] 20120422 CVE Request -- DokuWiki: XSS and CSRF due improper escaping of "target" parameter in preprocessing edit form data  View
578567 55371 CVE-2012-2128 URL:http://www.openwall.com/lists/oss-security/2012/04/22/4  View
578568 55371 CVE-2012-2128 MLIST:[oss-security] 20120422 Re: CVE Request -- DokuWiki: XSS and CSRF due improper escaping of "target" parameter in preprocessing edit form data  View
578569 55371 CVE-2012-2128 URL:http://www.openwall.com/lists/oss-security/2012/04/23/1  View
578570 55371 CVE-2012-2128 MISC:http://bugs.dokuwiki.org/index.php?do=details&task_id=2488  View
578571 55371 CVE-2012-2128 MISC:http://ircrash.com/uploads/dokuwiki.txt  View
578572 55371 CVE-2012-2128 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=815122  View
578573 55371 CVE-2012-2128 BID:53041  View
578574 55371 CVE-2012-2128 URL:http://www.securityfocus.com/bid/53041  View
578575 55371 CVE-2012-2128 SECUNIA:48848  View
578576 55371 CVE-2012-2128 URL:http://secunia.com/advisories/48848  View
578577 55371 CVE-2012-2128 XF:dokuwiki-doku-xss(74907)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27266 JVNDB-2012-002973 Linux Kernel におけるサービス運用妨害 (システムクラッシュ) の脆弱性 Linux Kernel には、HugePages が有効である場合、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (システムクラッシュ) 状態となる、または権限を取得される脆弱性が存在します。 CVE-2012-2133 55371 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002973.html  View