Download
| Alert*
|
oval:org.secpod.oval:def:602397
didiwiki is installed oval:org.secpod.oval:def:602379 Alexander Izmailov discovered that didiwiki, a wiki implementation, failed to correctly validate user-supplied input, thus allowing a malicious user to access any part of the filesystem. oval:org.secpod.oval:def:602461 The update for didiwiki issued as DSA-3485-1 introduced a regression that caused a large number of valid pages to not be accessible anymore. This occurred mostly for pages whose names started with non-ascii characters. |
