CVE-2019-9187

HIGH 7.5CVE-2019-9187 · Published 05/06/2019 · updated 17/06/2026

In short

CVE-2019-9187 is a HIGH (CVSS 7.5) vulnerability affecting ikiwiki (ikiwiki).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.2% of all vulnerabilities.
Fix: update to 3.20190226, 3.20170111.1 or later.

Package	Affected versions	Patched versions
ikiwiki ikiwiki	`= 3.20180105= 3.20180228= 3.20180311≥ 3.20190207, < 3.20190226< 3.20170111.1`	`3.201902263.20170111.1`

Description

ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs.

References

ikiwiki.info/news · Vendor Advisory
ikiwiki.info/news/version_3.20190228
lists.debian.org/debian-lts-announce/2019/03/msg00018.html

More vulnerabilities in ikiwiki

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ikiwiki

= 3.20180105= 3.20180228= 3.20180311≥ 3.20190207, < 3.20190226< 3.20170111.1

3.201902263.20170111.1

More vulnerabilities in ikiwiki

See all →