CVEvulnerability
CVE-2015-8003
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-11-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file uploads, which allows remote authenticated users to have unspecified impact via multiple file uploads.
Affected configurations
• mediawiki mediawiki (<= 1.23.10)
• mediawiki mediawiki 1.24.0
• mediawiki mediawiki 1.24.1
• mediawiki mediawiki 1.24.2
• mediawiki mediawiki 1.24.3
• mediawiki mediawiki 1.25.0
• mediawiki mediawiki 1.25.1
• mediawiki mediawiki 1.25.2
Related
Weakness · not in database (1)
References
- http://www.securitytracker.com/id/1034028 www.securitytracker.com
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html Patch, Vendor Advisory
- https://phabricator.wikimedia.org/T91850 Vendor Advisory
- http://www.securitytracker.com/id/1034028 www.securitytracker.com
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html Patch, Vendor Advisory
- https://phabricator.wikimedia.org/T91850 Vendor Advisory