CVEvulnerability
CVE-2008-5687
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/.
Affected configurations
• mediawiki mediawiki 1.11
• mediawiki mediawiki 1.11.1
• mediawiki mediawiki 1.11.2
• mediawiki mediawiki 1.12.0
• mediawiki mediawiki 1.12.1
• mediawiki mediawiki 1.12.2
• mediawiki mediawiki 1.12.3
• mediawiki mediawiki 1.13.0
• mediawiki mediawiki 1.13.1
• mediawiki mediawiki 1.13.2
Related
Weakness · not in database (1)
References
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html lists.wikimedia.org
- http://secunia.com/advisories/33349 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47678 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html www.redhat.com
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html lists.wikimedia.org
- http://secunia.com/advisories/33349 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47678 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html www.redhat.com