Security Advisory
CVE-2015-2172
6.5
Vulnerability Description
DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.
Published Date
March 30, 2015
Official Source
NIST NVD Advisory