Описание
Mediawiki tarball is missing .htaccess files
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2018-13258
- https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-13258.yaml
- https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html
- https://phabricator.wikimedia.org/T199029
- http://www.securitytracker.com/id/1041695
Пакеты
Наименование
mediawiki/core
composer
Затронутые версииВерсия исправления
>= 1.31.0, < 1.31.1
1.31.1
Связанные уязвимости
CVSS3: 5.3
ubuntu
около 8 лет назад
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.
CVSS3: 5.3
nvd
около 8 лет назад
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.
CVSS3: 5.3
debian
около 8 лет назад
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided ta ...
CVSS3: 8.8
altlinux
больше 7 лет назад
ALT-PU-2019-1337: package `mediawiki` update to version 1.32.0-alt1