MediaWiki < 1.23.11 / 1.24.4 / 1.25.3 Multiple Vulnerabilities

medium Nessus Network Monitor Plugin ID 9472

Synopsis

The remote web server is running a PHP application that is out of date

Description

The version of MediaWiki installed is 1.23.x earlier than 1.23.11, 1.24.x earlier than 1.24.4, or 1.25.x earlier than 1.25.3. Therefore, it is affected by multiple vulnerabilities :

- A flaw exists in the Chunked Upload API that is due to the program failing to stop adding new chunks to the upload when the reported size was exceeded. This may allow a remote attacker to upload a potentially infinite number of chunks for a single file upload and exhaust available disk space on the server. (CVE-2015-8001)
- A flaw in the Chunked Upload API may allow a remote attacker to upload files in chunks of 1 byte. This may allow the attacker to create an excessively large number of files on the server. (CVE-2015-8002)
- A flaw exists due to a missing file upload throttling feature, which can allow remote attackers to cause excessive stress on the server. (CVE-2015-8003)
- A flaw exists that is triggered as authorization checks are missing when removing a suppression from a revision. This may allow an unauthorized, but authenticated, remote attacker to remove a revision suppression. (CVE-2015-8004)
- A flaw exists that is triggered as thumbnails of PNG files that are created with ImageMagick contain potentially sensitive information. This may allow a remote attacker to gain access to local file path information. (CVE-2015-8005)

Solution

Upgrade to MediaWiki version 1.25.3. If 1.25.x cannot be obtained, versions 1.24.4, and 1.23.11 have also been patched for these vulnerabilities.

Plugin Details

Severity: Medium

ID: 9472

Family: CGI

Published: 8/5/2016

Updated: 3/6/2019

Nessus ID: 89179, 89332, 89450

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 6.2

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:mediawiki:mediawiki

Patch Publication Date: 10/16/2015

Vulnerability Publication Date: 10/16/2015

Reference Information

CVE: CVE-2015-8001, CVE-2015-8002, CVE-2015-8003, CVE-2015-8004, CVE-2015-8005

BID: 77372, 77375

Detections

Analytics