Advisories · Technology
perber leafwiki.
Every CVE that names perber leafwiki among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction
- perber leafwiki
- CWE-409
- CVSS 4.8 Medium
LeafWiki vulnerable to stored XSS via search-result title (highlight() returns raw title into dangerouslySetInnerHTML)
- perber leafwiki
- Cross-site scripting (XSS)
- CVSS 8.8 High
FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter
- perber leafwiki
- Path traversal
- CVSS 8.8 High
LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update
- perber leafwiki
- Privilege escalation