CVE-2014-8761 describes an access control vulnerability in DokuWiki versions prior to 2014-05-05a. The flaw in inc/template.php allows unauthenticated remote attackers to view arbitrary images through a media file details AJAX call, bypassing intended access restrictions. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it requires no authentication and has a low attack complexity, leading to potential information disclosure. There is currently no public exploit intelligence available, such as Metasploit modules or ExploitDB entries, and it has not been added to the CISA KEV catalog. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2013-12-08CPE matchmatch criteria | cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.