| Package | Affected versions | Patched versions |
|---|---|---|
| dokuwiki | ≤ 2013-12-08 |
DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null (\0) character, which triggers an anonymous bind.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free