CVE-2026-104449: YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fiche
YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existing wiki page, including pages whose write ACL restricts editing, via the Bazar entry-creation flow. Attackers can submit a crafted entry with an attacker-controlled idfiche matching an existing page, overwriting its body for mass defacement and content destruction.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
YesWikito a version that resolves this vulnerability.Fixed in 4.6.7
Event History
Frequently Asked Questions
Who can exploit this issue?
Any unauthenticated remote attacker can exploit it. No account or user interaction is required, although successful exploitation requires crafting a Bazar entry with an id_fiche that matches an existing wiki page.
Are pages protected by write ACLs still at risk?
Yes. The issue allows an attacker to overwrite existing pages even when their write ACL restricts editing.
Which deployments are affected?
YesWiki versions before 4.6.7 are affected. The vulnerable path is the Bazar entry-creation flow.
What is the likely impact of exploitation?
An attacker can replace the body of any existing wiki page, enabling mass defacement and destruction of page content. The provided severity data indicates integrity impact and limited availability impact, with no confidentiality impact.