CERT24YesWiki before 4.7.0 allows a read-ACL bypassLoading data…
CERT24Threat Observatory
Period

YesWiki before 4.7.0 allows a read-ACL bypass

YesWiki versions before 4.7.0 contain a read-ACL bypass in AclService::updateRequestWithACL. Self-registered attackers can use usernames such as ___ or %%% to over-match ACL tokens and read pages and Bazar entries restricted to other users or groups through the public Bazar listing API.

← Back to intelligence

YesWiki before 4.7.0 allows a read-ACL bypass

YesWiki versions before 4.7.0 contain a read-ACL bypass in AclService::updateRequestWithACL. Self-registered attackers can use usernames such as ___ or %%% to over-match ACL tokens and read pages and Bazar entries restricted to other users or groups through the public Bazar listing API.