VWE-2018-4352 Printable Version
This page is a chapter in Info Known Vulnerabilities
The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.
Common Name None VWE-ID VWE-2018-4352 Related Report #5340 Severity MEDIUM Exploit Difficulty NORMAL Platform Affects all platforms supported by the vulnerable versions. Description Denial of Service. An unprivileged user may be able to "disappear" certain wiki pages by exploiting moderated edits, rollbacks, and some other actions.
Discovered January 19, 2018 Resolved February 8, 2018 Patches Available 4.0.20 Patch Level 3
4.0.19 Patch Level 6
4.0.18 Patch Level 7
4.0.17 Patch Level 9
Notes
After applying the patch, it should be possible to recover any pages that have already been affected by this issue, by using the tool in AdminCP > Wiki > Maintenance > Rebuild Counters / Caches > Rebuild Content URLs.