maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified vectors.

The remote host is affected by the vulnerability described in GLSA-201310-21 (MediaWiki: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MediaWiki. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker may be able to execute arbitrary code, perform       man-in-the-middle attacks, obtain sensitive information or perform       cross-site scripting attacks.
  Workaround :

    There is no known workaround at this time.

The MediaWiki install hosted on the remote web server is affected by an arbitrary file access vulnerability due to a failure to restrict the execution of the 'maintenance/mwdoc-filter.php' script. An attacker can exploit this issue by sending a specialized URI to read files located outside the web server's root directory.

According to its version number, the instance of MediaWiki running on the remote host is affected by multiple security vulnerabilities :

  - A flaw exists related to certificate validation due to     the server hostname not being verified to match a domain     name in the Common Name (CN) or SubjectAltName of the     X.509 certificate. This allows a man-in-the-middle     attacker to spoof SSL services through the use of an     arbitrary certificate. (CVE-2013-1816)

  - A flaw exists when unblocking a user via the API that     leads to the disclosure of sensitive information.
    (CVE-2013-1817)

  - A flaw exists in version 1.20 in the     'maintenance/mwdoc-filter.php' script that is triggered     under certain server conditions. A remote attacker can     exploit this to gain access to arbitrary files.
    (CVE-2013-1818)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
70677	GLSA-201310-21 : MediaWiki: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
65900	MediaWiki mwdoc-filter.php Arbitrary File Access	Nessus	CGI abuses	medium
65899	MediaWiki 1.19.x < 1.19.4 / 1.20.x < 1.20.3 Multiple Vulnerabilities	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2013-1818

high

Tenable Plugins

high

medium

medium