Lucene search
HistoryNov 09, 2015 - 6:59 p.m.
CVE-2015-8002
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
8.8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.7%
The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users to cause a denial of service (disk consumption) via a file upload using one byte chunks.
Affected configurations
Node
mediawikimediawikiRange≤1.23.10
ORmediawikimediawikiMatch1.24.0
ORmediawikimediawikiMatch1.24.1
ORmediawikimediawikiMatch1.24.2
ORmediawikimediawikiMatch1.24.3
ORmediawikimediawikiMatch1.25.0
ORmediawikimediawikiMatch1.25.1
ORmediawikimediawikiMatch1.25.2
Related
ubuntucve
ubuntucve
CVE-2015-8002
2015-11-09 00:00:00
debiancve
debiancve
CVE-2015-8002
2015-11-09 18:59:01
cvelist
cvelist
CVE-2015-8002
2015-11-09 18:00:00
cve
cve
CVE-2015-8002
2015-11-09 18:59:01
prion
prion
Design/Logic Flaw
2015-11-09 18:59:00
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2015-11-02 23:21:29
openvas
openvas
MediaWiki Multiple Vulnerabilities (Nov 2015) - Windows
2015-11-25 00:00:00
MediaWiki Multiple Vulnerabilities (Nov 2015) - Linux
2015-11-25 00:00:00
Mageia: Security Advisory (MGASA-2015-0421)
2015-11-08 00:00:00
nessus
nessus
MediaWiki < 1.23.11 / 1.24.4 / 1.25.3 Multiple Vulnerabilities
2016-08-05 00:00:00
Fedora 23 : mediawiki-1.25.3-1.fc23 (2015-ec6d598d3d)
2016-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mediawiki-1.25.3-1.fc22
2015-11-05 23:27:59
[SECURITY] Fedora 21 Update: mediawiki-1.24.4-1.fc21
2015-11-05 21:50:58
[SECURITY] Fedora 23 Update: mediawiki-1.25.3-1.fc23
2015-11-05 22:26:54
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2015-10-16 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
8.8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.7%
Related for NVD:CVE-2015-8002