CVE-2014-8762

The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a crafted namespace in the ns parameter.

Date published : 2014-10-22

http://www.securityfocus.com/bid/70404

http://advisories.mageia.org/MGASA-2014-0438.html