Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-8002
HistoryNov 09, 2015 - 12:00 a.m.

CVE-2015-8002

2015-11-0900:00:00
ubuntu.com
ubuntu.com
6

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

64.7%

The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x
before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users
to cause a denial of service (disk consumption) via a file upload using one
byte chunks.

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

64.7%