Beveiligingsadvies

CVE-2026-92776

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 20:32:36

Laatst bijgewerkt 2026-09-16 20:32:36

Toegewezen door VulnCheck

CVSS-score 8.6

Status PUBLISHED

Beschrijving

Wiki.js through 2.5.314 fails to require path separators when matching START and END page rules, allowing attackers to access pages sharing a prefix with authorized folders. Users granted access to a folder can read and modify unrelated pages with matching prefixes, bypassing intended access controls.

← Alle CVE's bekijken Bekijk op cve.org ↗