Description
MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.
Metrics
CVSS 3.0 7.5/10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://www.openwall.com/lists/oss-security/2015/12/21/8Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/12/23/7Mailing List, Patch, Third Party Advisory
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.htmlPatch, Release Notes, Vendor Advisory
- https://phabricator.wikimedia.org/T118032Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/12/21/8Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/12/23/7Mailing List, Patch, Third Party Advisory
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.htmlPatch, Release Notes, Vendor Advisory
- https://phabricator.wikimedia.org/T118032Patch, Third Party Advisory
Timeline
- Published
- Mar 23, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified