CVE-2022-36081: Wikmd Project Wikmd

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, Wikmd is vulnerable to path traversal when accessing `/list/<path:folderpath>` and discloses lists of files located on the server including sensitive data. Version 1.7.1 fixes this issue.

Affected products

• Wikmd Project Wikmd: before 1.7.1 (fixed in 1.7.1)

Published 2022-09-07. Last modified 2026-06-17.