Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2vj4-mfcc-xffc

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.

EPSS

Процентиль: 48%
0.00253
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
около 10 лет назад

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.

nvd
около 10 лет назад

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.

debian
около 10 лет назад

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25 ...

EPSS

Процентиль: 48%
0.00253
Низкий

Дефекты

CWE-200