VYPR

docker-bluespice-wiki

by Hallowelt

CVEs (1)

  • CVE-2026-25784CriOct 23, 2026
    risk 0.57cvss 9.8epss —

    Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's LocalSettings.php was intended to restrict…