VaultWiki Security Update: Plagiarizer Vulnerability

Earlier this month, we received a bug report in which a user had noticed that his wiki was sometimes giving the wrong users credit for certain tasks. After investigation, our developers noted that this bug could be leveraged to perform permissions escalation and inject HTML or Javascript into wiki content.

This issue affects all VaultWiki versions 4.0.0 Alpha 1 - 4.0.6, including VaultWiki Lite.

On October 14, we published the following Patch Level releases to resolve this issue:

• 4.0.6 Patch Level 3
• 4.0.5 Patch Level 3
• 4.0.4 Patch Level 3
• 4.0.3 Patch Level 3
• 4.0.2 Patch Level 6
• 4.0.1 Patch Level 9
• 4.0.0 Patch Level 8
• 4.0.0 RC 5 Patch Level 7
• 4.0.0 RC 4 Patch Level 8

If you are not already, we highly recommend that all users running VaultWiki 4.x in a production environment upgrade to a patched release as soon as possible to .