CVE-2012-2129

MEDIUM 4.3CVE-2012-2129 · Published 27/08/2012 · updated 16/06/2026

In short

CVE-2012-2129 is a MEDIUM (CVSS 4.3) vulnerability affecting dokuwiki (andreas gohr).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dokuwiki andreas_gohr	`= 2012-01-25`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.

References

bugs.dokuwiki.org/index.php
ircrash.com/uploads/dokuwiki.txt · Exploit
seclists.org/bugtraq/2012/Apr/121
secunia.com/advisories/48848
openwall.com/lists/oss-security/2012/04/22/4
openwall.com/lists/oss-security/2012/04/23/1
securityfocus.com/bid/53041
bugs.gentoo.org/show_bug.cgi
bugzilla.redhat.com/show_bug.cgi
exchange.xforce.ibmcloud.com/vulnerabilities/74907
splitbrain/dokuwiki commit ff71173

More vulnerabilities in dokuwiki

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

dokuwiki

andreas_gohr

= 2012-01-25

No fix yet

More vulnerabilities in dokuwiki

See all →