Lucene search
HistoryNov 18, 2013 - 2:55 a.m.
CVE-2013-2114
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.4%
Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
Affected configurations
Node
mediawikimediawikiMatch1.19
ORmediawikimediawikiMatch1.19beta_1
ORmediawikimediawikiMatch1.19beta_2
ORmediawikimediawikiMatch1.19.0
ORmediawikimediawikiMatch1.19.1
ORmediawikimediawikiMatch1.19.2
ORmediawikimediawikiMatch1.19.3
ORmediawikimediawikiMatch1.19.4
ORmediawikimediawikiMatch1.19.5
ORmediawikimediawikiMatch1.19.6
ORmediawikimediawikiMatch1.20.1
ORmediawikimediawikiMatch1.20.2
ORmediawikimediawikiMatch1.20.3
ORmediawikimediawikiMatch1.20.4
ORmediawikimediawikiMatch1.20.5
Related
fedora
fedora
[SECURITY] Fedora 18 Update: mediawiki-1.19.7-1.fc18
2013-06-07 03:03:00
[SECURITY] Fedora 17 Update: mediawiki-1.19.7-1.fc17
2013-06-07 02:59:31
[SECURITY] Fedora 18 Update: mediawiki-1.19.8-1.fc18
2013-09-20 16:25:33
nessus
nessus
MediaWiki 1.19.x < 1.19.7 / 1.20.x < 1.20.6 Arbitrary File Upload
2013-06-07 00:00:00
Fedora 18 : mediawiki-1.19.7-1.fc18 (2013-9616)
2013-07-12 00:00:00
Fedora 17 : mediawiki-1.19.7-1.fc17 (2013-9622)
2013-07-12 00:00:00
openvas
openvas
Fedora Update for mediawiki FEDORA-2013-9616
2013-06-07 00:00:00
Mageia: Security Advisory (MGASA-2013-0221)
2022-01-28 00:00:00
Fedora Update for mediawiki FEDORA-2013-9622
2013-06-07 00:00:00
debiancve
debiancve
CVE-2013-2114
2022-10-03 16:15:01
prion
prion
Unrestricted file upload
2013-11-18 02:55:00
cvelist
cvelist
CVE-2013-2114
2022-10-03 16:15:01
cve
cve
CVE-2013-2114
2022-10-03 16:15:01
ubuntucve
ubuntucve
CVE-2013-2114
2013-11-18 00:00:00
mageia
mageia
Updated mediawiki packages fix security vulnerability
2013-07-21 12:57:46
gentoo
gentoo
MediaWiki: Multiple vulnerabilities
2013-10-28 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.4%
Related for NVD:CVE-2013-2114