CVE-2013-2114

Published: Nov 18, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

Affected (15)

Products: Mediawiki: Mediawiki

Mediawiki

1 product

Mediawiki

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Mediawiki Mediawiki	Version 1.19.0
Mediawiki Mediawiki	Version 1.19.1
Mediawiki Mediawiki	Version 1.19.2
Mediawiki Mediawiki	Version 1.19.3
Mediawiki Mediawiki	Version 1.19.4
Mediawiki Mediawiki	Version 1.19.5
Mediawiki Mediawiki	Version 1.19.6
Mediawiki Mediawiki	Version 1.19
Mediawiki Mediawiki	Version 1.19 beta_1
Mediawiki Mediawiki	Version 1.19 beta_2
Mediawiki Mediawiki	Version 1.20.1
Mediawiki Mediawiki	Version 1.20.2
Mediawiki Mediawiki	Version 1.20.3
Mediawiki Mediawiki	Version 1.20.4
Mediawiki Mediawiki	Version 1.20.5