Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-8625
HistoryMar 23, 2017 - 8:59 p.m.

Code injection

2017-03-2320:59:00
PRIOn knowledge base
www.prio-n.com
1

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%