CVE-2017-18123

• 8.6 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "last_affected":  "2017-02-19e"
                },
                {
                    "last_affected":  "2017-02-19e"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "dokuwiki:dokuwiki"
        },
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "7.0"
                },
                {
                    "last_affected":  "7.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "debian:debian_linux"
        },
        {
            "extracted_events":  [
                {
                    "fixed":  "2017-02-19e"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

• https://lists.debian.org/debian-lts-announce/2018/07/msg00004.html
• https://github.com/splitbrain/dokuwiki/issues/2029
• https://github.com/splitbrain/dokuwiki/pull/2019
• https://hackerone.com/reports/238316
• https://lists.debian.org/debian-lts-announce/2018/02/msg00004.html
• https://github.com/splitbrain/dokuwiki/commit/238b8e878ad48f370903465192b57c2072f65d86
• https://vulnhive.com/2018/000004