CVE-2022-1681

概要

参考情報

• requarks/wiki commit 78d02dc · Patch
• huntr.dev/bounties/591b11e1-7504-4a96-99c6-08f2b419e767 · Exploit

wiki.js のその他の脆弱性

• CVE-2026-44224高 8.8Wiki.js is an open source wiki app built on Node.js. Prior to 2.5.313, the users.update GraphQL mutation accepts an arbitrary groups array a…
• CVE-2025-56643緊急 9.1Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued token…
• CVE-2022-23654中 6.5Wiki.js is a wiki app built on Node.js. In affected versions an authenticated user with write access on a restricted set of paths can update…
• CVE-2021-25993中 5.4In Requarks wiki.js, versions 2.0.0-beta.147 to 2.5.255 are affected by Stored XSS vulnerability, where a low privileged (editor) user can u…
• CVE-2021-43856中 5.4Wiki.js is a wiki app built on Node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through non-image file uplo…