Lucene search

K
cvelistMitreCVELIST:CVE-2015-8625
HistoryMar 23, 2017 - 8:00 p.m.

CVE-2015-8625

2017-03-2320:00:00
mitre
www.cve.org

8.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.1%

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.

8.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.1%