Homepage
About Snyk

wiki@0.0.24.4.post1 vulnerabilities

A wiki system written for the Django framework.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the wiki package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Regular Expression Denial of Service (ReDoS)

wiki is a wiki system with complex functionality for simple integration and a superb interface.

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). An attacker can cause severe use of server CPU through a regular expression loop by submitting maliciously crafted article content.

Note:

This is only exploitable if the attacker has the ability to create or edit articles.

How to fix Regular Expression Denial of Service (ReDoS)?

Upgrade wiki to version 0.10.1 or higher.

[,0.10.1)
  • M
Cross-site Scripting (XSS)

wiki is a wiki system with complex functionality for simple integration and a superb interface.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via notifications section. An attacker who has access to edit pages can inject a JavaScript payload into the title field. When a victim gets a notification regarding the changes made in the application, the payload in the notification panel renders and loads external JavaScript.

How to fix Cross-site Scripting (XSS)?

Upgrade wiki to version 0.7.9 or higher.

[0.0.20,0.7.9)
Go back to all versions of this package