← Back

CVE-2008-5687

nvd nist
Published: Dec 19, 2008Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/.

Affected (14)

Products: Mediawiki: Mediawiki
1 product
Mediawiki
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Mediawiki
Version 1.11.1
Version 1.11.2
Version 1.11
Version 1.11 rc1
Version 1.12.0
Version 1.12.0 rc1
Version 1.12.1
Version 1.12.2
Version 1.12.3
Version 1.13.0
Version 1.13.0 rc1
Version 1.13.0 rc2
Version 1.13.1
Version 1.13.2

Related CWEs

Timeline

No history available yet.