tocsin

Debian/mediawiki: unknown

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading

Action: Upgrade mediawiki to 1:1.25.5-1 or later.

Affected

introducedfixedlast affected
01:1.25.5-1-

Fixed versions

1:1.25.5-1

Sources

published · modified · JSON