CVE-2012-3354 Information disclosure in n/a

What is CVE-2012-3354?

CVE-2012-3354 is a medium-severity vulnerability in Fedoraproject Fedora, published on 20 Nov 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.

Weakness: CWE-200

Which versions are affected by CVE-2012-3354?

It affects 2 products.

Products include Dokuwiki Dokuwiki, Fedoraproject Fedora.

How do I fix CVE-2012-3354?

Apply the vendor's patch.

Is CVE-2012-3354 being exploited?

There is no known exploitation of CVE-2012-3354 in the wild and no public exploit code.

Other vulnerabilities in Fedoraproject Fedora

• CVE-2018-15474 Code injection in n/a Critical 9.6
• CVE-2009-1960 Code injection in n/a Critical 9.3
• CVE-2016-7964 Server-side request forgery in n/a High 8.6
• CVE-2010-0288 Missing authorization in n/a High 7.5
• CVE-2019-25338 Dokuwiki 2018-04-22b - Username Enumeration Medium 6.9

All Fedoraproject Fedora vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2012-3354, GHSA-9q66-mr67-3695.