CVE-2017-18123

PoC ×2—

CVSS 3.0

8.6 high

EPSS

3%p84

Published

Feb 3, 2018 (Feb 3, 2018)

Modified

Jun 17, 2026

Description

The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs.

Vendors: dokuwiki debian
Products: dokuwiki, debian linux
Weakness: CWE-20
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.