An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration (a non-default feature).
0.0.20140929.d-10.0.20140929.d-1ubuntu10.0.20160626.a-20.0.20180422.a-20.0.20180422.a-2.10.0.20220731.a-22024-02-06b+dfsg-42024-02-06b+dfsg-92024-02-06b+dfsg-92025-05-14.a+dfsg-42025-05-14.b+dfsg-12025-05-14.b+dfsg-22025-05-14.b+dfsg-32025-05-14.b+dfsg-42025-05-14.b+dfsg-5Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:HI:HA:HCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H