Lucene search
HistoryNov 09, 2015 - 6:59 p.m.
CVE-2015-8005
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
9.4 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.4%
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.
Affected configurations
Node
mediawikimediawikiRange≤1.23.10
ORmediawikimediawikiMatch1.24.0
ORmediawikimediawikiMatch1.24.1
ORmediawikimediawikiMatch1.24.2
ORmediawikimediawikiMatch1.24.3
ORmediawikimediawikiMatch1.25.0
ORmediawikimediawikiMatch1.25.1
ORmediawikimediawikiMatch1.25.2
Related
cve
cve
CVE-2015-8005
2015-11-09 18:59:04
ubuntucve
ubuntucve
CVE-2015-8005
2015-11-09 00:00:00
cvelist
cvelist
CVE-2015-8005
2015-11-09 18:00:00
debiancve
debiancve
CVE-2015-8005
2015-11-09 18:59:04
prion
prion
Design/Logic Flaw
2015-11-09 18:59:00
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2015-11-02 23:21:29
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0421)
2015-11-08 00:00:00
MediaWiki Multiple Vulnerabilities (Nov 2015) - Windows
2015-11-25 00:00:00
MediaWiki Multiple Vulnerabilities (Nov 2015) - Linux
2015-11-25 00:00:00
nessus
nessus
MediaWiki < 1.23.11 / 1.24.4 / 1.25.3 Multiple Vulnerabilities
2016-08-05 00:00:00
Fedora 23 : mediawiki-1.25.3-1.fc23 (2015-ec6d598d3d)
2016-03-04 00:00:00
Fedora 21 : mediawiki-1.24.4-1.fc21 (2015-97fe05f788)
2016-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mediawiki-1.25.3-1.fc22
2015-11-05 23:27:59
[SECURITY] Fedora 21 Update: mediawiki-1.24.4-1.fc21
2015-11-05 21:50:58
[SECURITY] Fedora 23 Update: mediawiki-1.25.3-1.fc23
2015-11-05 22:26:54
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2015-10-16 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
9.4 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.4%
Related for NVD:CVE-2015-8005