CVE-2020-27191: LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted stri...

Security readout for executives and security teams

CVE-2020-27191 affects unsupported LionWiki versions before 3.2.12. An unauthenticated visitor could abuse a crafted request parameter to make the web application read local files accessible to the web server account. Business risk depends on whether LionWiki is still exposed and whether secrets or configuration files are readable by that account. Exposure is likely limited to legacy LionWiki deployments, especially internet-facing wiki instances running versions earlier than 3.2.12. Organizations without LionWiki are not affected based on the supplied sources. Prioritize this when LionWiki is internet-facing or stores sensitive operational content. Unsupported software with unauthenticated local file read risk should be retired or isolated quickly, even without confirmed active exploitation. Mitigation focus: Inventory websites and servers for LionWiki installations.; Upgrade to LionWiki 3.2.12 if continued use is unavoidable.; Prefer retiring or replacing unsupported LionWiki deployments..

Prepared

Jun 3, 2026, 04:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.