High severity8.6NVD Advisory· Published Oct 31, 2016· Updated May 6, 2026
CVE-2016-7964
CVE-2016-7964
Description
The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/splitbrain/dokuwiki/issues/1708nvdPatchThird Party Advisory
- www.securityfocus.com/bid/94245nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.