CVEvulnerability
CVE-2007-2552
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-05-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to obtain the names, and possibly revision notes and dates, of private pages via RSS feeds.
Affected configurations
• wikkawiki wikkawiki (<= 1.1.6.2)
• wikkawiki wikkawiki 1.0.0
• wikkawiki wikkawiki 1.0.1
• wikkawiki wikkawiki 1.0.2
• wikkawiki wikkawiki 1.0.3
• wikkawiki wikkawiki 1.0.4
• wikkawiki wikkawiki 1.0.5
• wikkawiki wikkawiki 1.0.6
• wikkawiki wikkawiki 1.1.0
• wikkawiki wikkawiki 1.1.2
• wikkawiki wikkawiki 1.1.3
• wikkawiki wikkawiki 1.1.3.1
• wikkawiki wikkawiki 1.1.3.2
• wikkawiki wikkawiki 1.1.3.3
• wikkawiki wikkawiki 1.1.3.4
• wikkawiki wikkawiki 1.1.3.5
• wikkawiki wikkawiki 1.1.3.6
• wikkawiki wikkawiki 1.1.3.7
• wikkawiki wikkawiki 1.1.3.8
• wikkawiki wikkawiki 1.1.3.9
• wikkawiki wikkawiki 1.1.4.0
• wikkawiki wikkawiki 1.1.5.0
• wikkawiki wikkawiki 1.1.5.1
• wikkawiki wikkawiki 1.1.5.2
• wikkawiki wikkawiki 1.1.5.3
• wikkawiki wikkawiki 1.1.5.4
• wikkawiki wikkawiki 1.1.6.0
• wikkawiki wikkawiki 1.1.6.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://osvdb.org/35827 osvdb.org
- http://secunia.com/advisories/25181 Patch, Vendor Advisory
- http://wikkawiki.org/WikkaReleaseNotes Patch
- http://wush.net/trac/wikka/ticket/305 wush.net
- http://www.attrition.org/pipermail/vim/2007-May/001607.html www.attrition.org
- http://www.securityfocus.com/bid/23894 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1725 Vendor Advisory
- http://osvdb.org/35827 osvdb.org
- http://secunia.com/advisories/25181 Patch, Vendor Advisory
- http://wikkawiki.org/WikkaReleaseNotes Patch
- http://wush.net/trac/wikka/ticket/305 wush.net
- http://www.attrition.org/pipermail/vim/2007-May/001607.html www.attrition.org
- http://www.securityfocus.com/bid/23894 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1725 Vendor Advisory