Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

YesWiki/yeswiki

              doryphore-dev @ 8dc9b82
            

137

Fixes

CVEs

CRITICAL

Peak severity

32.4%

Coverage

Highlights

Auth Bypass: 36 prior fixes. Scrutinize any change in this area.

includes/services/AclService.php: most-fixed (8 issues). Treat as high-risk during review.

108 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Massive class of flaws: ACL checks missing, bypassed in public mode, incorrect group names, recursive group bugs, anonymous comment access, and missing admin checks on form/entry operations.

SQL Injection: User-controlled values (tags, formId, date, needle, ACL lists) concatenated into SQL without escaping; multiple LIKE/IN/REGEXP clauses vulnerable.

CSRF: State-changing actions (delete, create, update, upgrade, file ops) lacked CSRF tokens, used GET, or had token name mismatches; token fixation possible.