CVE-2008-5687

EPSS 0.44%
Published 19.12.2008 17:30:03
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Mediawiki ≫ Mediawiki Version1.11

Mediawiki ≫ Mediawiki Version1.11 Updaterc1

Mediawiki ≫ Mediawiki Version1.11.1

Mediawiki ≫ Mediawiki Version1.11.2

Mediawiki ≫ Mediawiki Version1.12.0

Mediawiki ≫ Mediawiki Version1.12.0 Updaterc1

Mediawiki ≫ Mediawiki Version1.12.1

Mediawiki ≫ Mediawiki Version1.12.2

Mediawiki ≫ Mediawiki Version1.12.3

Mediawiki ≫ Mediawiki Version1.13.0

Mediawiki ≫ Mediawiki Version1.13.0 Updaterc1

Mediawiki ≫ Mediawiki Version1.13.0 Updaterc2

Mediawiki ≫ Mediawiki Version1.13.1

Mediawiki ≫ Mediawiki Version1.13.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.44%	0.62

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html

http://secunia.com/advisories/33349

Vendor Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/47678

https://nvd.nist.gov/vuln/detail/CVE-2008-5687

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5687

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5687

EUVD