Debian/mediawiki: unknown
The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authent
Action: Upgrade mediawiki to 1:1.25.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:1.25.5-1 | - |
Fixed versions
| 1:1.25.5-1 |
Sources
- osv: DEBIAN-CVE-2015-8001#Debian:14/mediawiki
- https://security-tracker.debian.org/tracker/CVE-2015-8001
published · modified · JSON