Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-8001
HistoryNov 09, 2015 - 12:00 a.m.

CVE-2015-8001

2015-11-0900:00:00
ubuntu.com
ubuntu.com
3

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

64.8%

The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x
before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data
to the claimed file size, which allows remote authenticated users to cause
a denial of service via a chunk that exceeds the file size.

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

64.8%