Lucene search
HistoryNov 09, 2015 - 6:59 p.m.
CVE-2015-8003
mediawiki
cve-2015-8003
file uploads
security vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
9.1 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.9%
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file uploads, which allows remote authenticated users to have unspecified impact via multiple file uploads.
Affected configurations
Node
mediawikimediawikiRange≤1.23.10
ORmediawikimediawikiMatch1.24.0
ORmediawikimediawikiMatch1.24.1
ORmediawikimediawikiMatch1.24.2
ORmediawikimediawikiMatch1.24.3
ORmediawikimediawikiMatch1.25.0
ORmediawikimediawikiMatch1.25.1
ORmediawikimediawikiMatch1.25.2
Related
nvd
nvd
CVE-2015-8003
2015-11-09 18:59:02
debiancve
debiancve
CVE-2015-8003
2015-11-09 18:59:02
ubuntucve
ubuntucve
CVE-2015-8003
2015-11-09 00:00:00
prion
prion
Design/Logic Flaw
2015-11-09 18:59:00
cvelist
cvelist
CVE-2015-8003
2015-11-09 18:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0421)
2015-11-08 00:00:00
MediaWiki Multiple Vulnerabilities (Nov 2015) - Windows
2015-11-25 00:00:00
MediaWiki Multiple Vulnerabilities (Nov 2015) - Linux
2015-11-25 00:00:00
nessus
nessus
MediaWiki < 1.23.11 / 1.24.4 / 1.25.3 Multiple Vulnerabilities
2016-08-05 00:00:00
Fedora 23 : mediawiki-1.25.3-1.fc23 (2015-ec6d598d3d)
2016-03-04 00:00:00
Fedora 22 : mediawiki-1.25.3-1.fc22 (2015-24fe8b66c9)
2016-03-04 00:00:00
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2015-11-02 23:21:29
fedora
fedora
[SECURITY] Fedora 22 Update: mediawiki-1.25.3-1.fc22
2015-11-05 23:27:59
[SECURITY] Fedora 23 Update: mediawiki-1.25.3-1.fc23
2015-11-05 22:26:54
[SECURITY] Fedora 21 Update: mediawiki-1.24.4-1.fc21
2015-11-05 21:50:58
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2015-10-16 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
9.1 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.9%
Related for CVE-2015-8003