Multiple vulnerabilities have been found in Tiki Wiki

Overview :

New vulnerabilities discovered in Tiki Wiki

Affected Product(s) :

Tiki 7.2 & 8.0 RC1

Vulnerability Details :

CVE ID :	CVE-2011-4455
	Multiple cross-site scripting vulnerabilities in Tiki 7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to (1) tiki-admin_system.php, (2) tiki-pagehistory.php, (3) tiki-removepage.php, or (4) tiki-rename_page.php.
CVE ID :	CVE-2011-4454
	Multiple cross-site scripting vulnerabilities in Tiki 8.0 RC1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to (1) tiki-remind_password.php, (2) tiki-index.php, (3) tiki-login_scr.php, or (4) tiki-index.

Remediation / Fixes :

Upgrade to Tiki 8.1 (End-of-Life for Tiki 7.x)

Contact us to get started

CVE-2022-22486 : IBM TIVOLI WORKLOAD SCHEDULER 9.4/9.5/10.1 XML EXTERNAL ENTITY REFERENCE

Description IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when

Learn more

CVE-2023-24997 : APACHE INLONG UP TO 1.5.0 DESERIALIZATION

Description Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0.

Learn more

CVE-2022-37708 : DOCKER 20.10.15 BUILD FD82621 PERMISSION

Description Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker container can access any

Learn more