China National Vulnerability DatabaseCNVD-2023-06083MediaWiki has an unspecified vulnerability (CNVD-2023-06083)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
MediaWiki is a free and free-to-use web-based wiki engine from the U.S. Wikimedia (MediaWiki) Foundation. A security vulnerability exists in MediaWiki, which stems from the use of file mode 0644 when installed using a pre-existing data directory with weak privileges, which allows local users to read SQLITE files of the world, including credential data. No details of the vulnerability are currently available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mediawiki mediawiki | lt | 1.35.9 | |
| mediawiki mediawiki >=1.36.0， | lt | 1.38.5 | |
| mediawiki mediawiki | eq | 1.39.0 |
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N