PT-2018-11722 · Mediawiki+1 · Mediawiki+1

Legoktm · Publicado 2018-10-04 · Atualizado 2022-05-14 · CVE-2018-13258

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki version 1.31

Description The issue arises from missing .htaccess files in the provided tarball for MediaWiki, which are used to protect certain directories from being web accessible.

Recommendations For MediaWiki version 1.31, update to version 1.31.1 to include the necessary .htaccess files and protect the directories as intended.

Exploit

Correção

Information Disclosure

Improper Access Control

Enumeração de Fraquezas

CWE-200

CWE-284

Identificadores relacionados

ALT-PU-2019-1337

CVE-2018-13258

GHSA-2C28-7GWV-CPGF

Produtos afetados

Alt Linux

Mediawiki

Referências · 16

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-13258.yaml · Exploit
• https://github.com/wikimedia/mediawiki · Nota
• https://osv.dev/vulnerability/CVE-2018-13258 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2019-1337 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-13258 · Aviso do Fabricante
• https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41801 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-13258 · Aviso do Fabricante
• https://phabricator.wikimedia.org/T199029 · Correção
• https://cve.org/CVERecord?id=CVE-2018-13258 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13258 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2018-13258 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-13258 · Nota de Segurança
• http://securitytracker.com/id/1041695 · Nota
• https://osv.dev/vulnerability/GHSA-2c28-7gwv-cpgf · Aviso do Fabricante