maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified vectors.
2014-06-02T15:55:09.497
2025-04-12T10:46:40.837
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:P/I:N/A:N
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | mediawiki | mediawiki | ≤ 1.20.2 | Yes |
Application | mediawiki | mediawiki | 1.20 | Yes |
Application | mediawiki | mediawiki | 1.20.1 | Yes |