MediaWiki Arbitrary File Upload Vulnerability
BID:60077
Info
MediaWiki Arbitrary File Upload Vulnerability
| Bugtraq ID: | 60077 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-2114 |
| Remote: | Yes |
| Local: | No |
| Published: | May 22 2013 12:00AM |
| Updated: | Apr 13 2015 09:37PM |
| Credit: | Marco |
| Vulnerable: |
MediaWiki Mediawiki 1.20.5 MediaWiki Mediawiki 1.20.4 MediaWiki Mediawiki 1.20.3 MediaWiki Mediawiki 1.20.2 MediaWiki Mediawiki 1.20.1 MediaWiki Mediawiki 1.19.6 MediaWiki Mediawiki 1.19.5 MediaWiki Mediawiki 1.19.4 MediaWiki Mediawiki 1.19.3 MediaWiki Mediawiki 1.19.2 MediaWiki Mediawiki 1.19.1 MediaWiki Mediawiki 1.20 Gentoo Linux |
| Not Vulnerable: |
MediaWiki Mediawiki 1.20.6 MediaWiki Mediawiki 1.19.7 |
Discussion
MediaWiki Arbitrary File Upload Vulnerability
MediaWiki is prone to a vulnerability that lets attackers upload arbitrary files.
An attacker may leverage this issue to upload arbitrary files to the affected computer. Note that this issue could be exploited to execute arbitrary code, however, this has not been confirmed.
The following versions are vulnerable:
MediaWiki 1.20.0 through 1.20.5
MediaWiki 1.19.0 through 1.19.6
MediaWiki is prone to a vulnerability that lets attackers upload arbitrary files.
An attacker may leverage this issue to upload arbitrary files to the affected computer. Note that this issue could be exploited to execute arbitrary code, however, this has not been confirmed.
The following versions are vulnerable:
MediaWiki 1.20.0 through 1.20.5
MediaWiki 1.19.0 through 1.19.6
Exploit / POC
MediaWiki Arbitrary File Upload Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
MediaWiki Arbitrary File Upload Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.