MantisBT: master-2.25 65c44883

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad community master-2.25 2023-10-14 12:09 master-2.25 2cf945b1
Affected Issues  0032981: CVE-2023-44394: Information Leakage on DokuWiki Integration
Changeset

Merge pull request from GHSA-v642-mh27-8j6m

Due to insufficient access-level checks on the Wiki redirection page,
any user could reveal private Projects' names, by accessing wiki.php
with sequentially incremented IDs.

Fixes 0032981, CVE-2023-44394
mod - wiki.php Diff File