{"action":"Upgrade mediawiki to 1:1.39.4-1~deb12u1 or later.","affected":[{"fixed":"1:1.39.4-1~deb12u1","introduced":"0"}],"component":"mediawiki","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1:1.39.4-1~deb12u1"],"id":"tcs_01M5NJ4WVSQKJKWYTGSZC39MSQ","modified_at":"2026-10-26T18:02:19.916675387Z","published_at":"2023-08-20T18:15:09.930Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-36674","https://security-tracker.debian.org/tracker/CVE-2023-36674"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-36674","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-36674"}],"summary":"An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. It is possible to bypass the Bad image list (aka badFile) by u"}