CVE-2015-8625

Summary

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.

Impact & exploitability

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: http://www.openwall.com/lists/oss-security/2015/12/21/8 ↗

Additional information

• NVD record
• http://www.openwall.com/lists/oss-security/2015/12/21/8Patch
• http://www.openwall.com/lists/oss-security/2015/12/23/7Patch
• https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.htmlPatch
• https://phabricator.wikimedia.org/T118032Patch