CVE-2016-7964 Server-side request forgery in n/a

High 8.6 Published 31 Oct 2016 Updated 6 Aug 2024

Attackers can scan internal network ports via Server-Side Request Forgery in DokuWiki when media file fetching is enabled.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-7964?

CVE-2016-7964 is a high-severity server-side request forgery vulnerability in n/a, published on 31 Oct 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16.

Weakness: CWE-918

Which versions are affected by CVE-2016-7964?

It affects 1 product.

Products include Dokuwiki Dokuwiki.

How do I fix CVE-2016-7964?

Upgrade to a fixed version.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2016-7964 being exploited?

There is no known exploitation of CVE-2016-7964 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2016-7964, GHSA-943p-qf6q-5m99, UBUNTU-CVE-2016-7964.