Cpe:2.3:a:wiki_js:wiki_js:*:*:*:*:*:*:*:*

Wiki.js versions 2.5.314 and earlier contain an access control vulnerability where insufficient path validation allows authenticated users to access unauthorized pages sharing a common prefix.