CVE catalog

CVE-2004-2559

dokuwiki: CVE-2004-2559

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
1.59% · Oct 25, 2026

DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandokuwikisid2026-07-14.c+dfsg-3not affected
Debiandokuwikiforky2026-07-14.c+dfsg-3not affected
Debiandokuwikitrixie2024-02-06b+dfsg-9not affected
Debiandokuwikibookworm0.0.20220731.a-2not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebiandokuwikisourcesidNot affectedunimportantNot reportedNot reported
DebiandokuwikisourceforkyNot affectedunimportantNot reportedNot reported
DebiandokuwikisourcetrixieNot affectedunimportantNot reportedNot reported
DebiandokuwikisourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dokuwiki]Not affected
    Details (2)
    • 0.0.20220731.a-2 · all · bookworm

      Not affected

      dsa · dokuwiki · debian · bookworm

    • 0.0.20220731.a-2 · all · bookworm

      Not affected

      dsa · dokuwiki · debian · bookworm

Observed:

References