Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2015-8001

The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authenticated users to cause a denial of service via a chunk that exceeds the file size.

  • Published: Nov 9, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-8001
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:N/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
mediawiki / mediawiki 1.24.2 1.24.2.x
mediawiki / mediawiki 1.24.3 1.24.3.x
mediawiki / mediawiki - 1.23.10.x
mediawiki / mediawiki 1.24.0 1.24.0.x
mediawiki / mediawiki 1.24.1 1.24.1.x
mediawiki / mediawiki 1.25.2 1.25.2.x
mediawiki / mediawiki 1.25.1 1.25.1.x
mediawiki / mediawiki 1.25.0 1.25.0.x