{"action":"Upgrade mediawiki to 1:1.25.5-1 or later.","affected":[{"fixed":"1:1.25.5-1","introduced":"0"}],"component":"mediawiki","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1:1.25.5-1"],"id":"tcs_01M5NBA9N52T61THCMD5FFTM0K","modified_at":"2026-09-09T06:47:22.347353932Z","published_at":"2015-11-09T18:59:00.113Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-8001","https://security-tracker.debian.org/tracker/CVE-2015-8001"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-8001#Debian:14/mediawiki","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-8001"}],"summary":"The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authent"}