CVE-2015-8001

The chunked upload API ApiUpload in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authenticated users to cause a denial of service via a chunk that exceeds the file size...

CVE-2015-8002

The chunked upload API ApiUpload in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users to cause a denial of service disk consumption via a file upload using one byte chunks...

CVE-2015-8002

The chunked upload API ApiUpload in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users to cause a denial of service disk consumption via a file upload using one byte chunks...

CVE-2015-8001: Improper Access Control

The chunked upload API ApiUpload in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authenticated users to cause a denial of service via a chunk that exceeds the file size...

CVE-2015-8002: Undefined Security Weakness

The chunked upload API ApiUpload in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users to cause a denial of service disk consumption via a file upload using one byte chunks...

PT-2015-7700

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.23.11 MediaWiki versions 1.24.x prior to 1.24.4 MediaWiki versions 1.25.x prior to 1.25.3 Description The issue concerns the chunked upload API in MediaWiki, where the uploaded data is not restricted to the claime...

PT-2015-7701

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.23.11 MediaWiki versions 1.24.x prior to 1.24.4 MediaWiki versions 1.25.x prior to 1.25.3 Description The issue allows remote authenticated users to cause a denial of service, specifically disk consumption, by...

FreeBSD : mediawiki -- multiple vulnerabilities (b973a763-7936-11e5-a2a1-002590263bf5)

MediaWiki reports : Wikipedia user RobinHood70 reported two issues in the chunked upload API. The API failed to correctly stop adding new chunks to the upload when the reported size was exceeded T91203, allowing a malicious users to upload add an infinite number of chunks for a single file upload...

CVE-2008-1532

Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service crash via a zero-byte chunked upload...

CVE-2008-1532: Improper Input Validation

Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service crash via a zero-byte chunked upload...

CVE-2008-1532

Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service crash via a zero-byte chunked upload...