Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7051
HistoryJul 13, 2018 - 5:38 a.m.

Insecure Cache Storage

2018-07-1305:38:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.002 Low

EPSS

Percentile

56.5%

mediawiki stores cache files in /tmp directory and is vulnerable to cache poisoning attacks. A user on the same system will be able to insert an evil cache file and perform xss attacks to steal user credentials and information.