MediaWiki Multiple Security Vulnerabilities
BID:73477
Info
MediaWiki Multiple Security Vulnerabilities
| Bugtraq ID: | 73477 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-2931 CVE-2015-2932 CVE-2015-2933 CVE-2015-2934 CVE-2015-2935 CVE-2015-2936 CVE-2015-2937 CVE-2015-2938 CVE-2015-2939 CVE-2015-2940 CVE-2015-2941 CVE-2015-2942 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 31 2015 12:00AM |
| Updated: | Dec 08 2015 10:03PM |
| Credit: | iSEC Partners, Bawolff, Jackmcbarn and the vendor. |
| Vulnerable: |
Gentoo Linux |
| Not Vulnerable: | |
Discussion
MediaWiki Multiple Security Vulnerabilities
MediaWiki is prone to the following security vulnerabilities:
1. An arbitrary file-upload vulnerability
2. Multiple security-bypass vulnerabilities
3. An HTML-injection vulnerability
4. Multiple denial-of-service vulnerabilities
5. A privilege-escalation vulnerability
6. A cross-site scripting vulnerability
7. A cross-site request forgery vulnerability
An attacker can exploit these issues to perform unauthorized actions, bypass security restrictions, cause denial-of-service conditions, execute attacker-supplied HTML or JavaScript code in the context of the affected site, to steal cookie-based authentication credentials, upload arbitrary files, execute arbitrary code, or gain elevated privileges. This may aid in further attacks.
Versions prior to MediaWiki 1.19.24, 1.23.9 and 1.24.2 are vulnerable.
MediaWiki is prone to the following security vulnerabilities:
1. An arbitrary file-upload vulnerability
2. Multiple security-bypass vulnerabilities
3. An HTML-injection vulnerability
4. Multiple denial-of-service vulnerabilities
5. A privilege-escalation vulnerability
6. A cross-site scripting vulnerability
7. A cross-site request forgery vulnerability
An attacker can exploit these issues to perform unauthorized actions, bypass security restrictions, cause denial-of-service conditions, execute attacker-supplied HTML or JavaScript code in the context of the affected site, to steal cookie-based authentication credentials, upload arbitrary files, execute arbitrary code, or gain elevated privileges. This may aid in further attacks.
Versions prior to MediaWiki 1.19.24, 1.23.9 and 1.24.2 are vulnerable.
Exploit / POC
MediaWiki Multiple Security Vulnerabilities
Attackers can exploit this issue using a browser or readily available tools.
Attackers can exploit this issue using a browser or readily available tools.
Solution / Fix
MediaWiki Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.