CVE-2008-5687
CVE-2008-5687
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/.
EPSS 2.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47678
- http://secunia.com/advisories/33349
- https://nvd.nist.gov/vuln/detail/CVE-2008-5687