CVE-2013-1818

Published: Jun 2, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified vectors.

Affected (3)

Products: Mediawiki: Mediawiki

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mediawiki Mediawiki	Up to 1.20.2
Mediawiki Mediawiki	Version 1.20.1
Mediawiki Mediawiki	Version 1.20

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

http://www.mediawiki.org/wiki/Release_notes/1.20

Source: secalert@redhat.com

http://www.securityfocus.com/bid/58304

Source: secalert@redhat.com

https://bugzilla.wikimedia.org/show_bug.cgi?id=45355

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/88363

Source: secalert@redhat.com

http://www.mediawiki.org/wiki/Release_notes/1.20

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/58304

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.wikimedia.org/show_bug.cgi?id=45355

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/88363

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.