5.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
47.1%
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn’t be web accessible.
www.securitytracker.com/id/1041695
lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
phabricator.wikimedia.org/T199029