SB2016103104 - Server-Side Request Forgery (SSRF) in DokuWiki
Published: October 31, 2016 Updated: August 9, 2020
Security Bulletin ID
SB2016103104
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Server-Side Request Forgery (SSRF) (CVE-ID: CVE-2016-7964)
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
Remediation
Install update from vendor's website.