Mediawiki tarball is missing .htaccess files
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-13258US | medium5.3 | — | ||
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible. | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.securitytracker.com/id/1041695WEB
- https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2018-13258.yamlWEB
- https://github.com/wikimedia/mediawikiPACKAGE
- https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-13258ADVISORY
- https://phabricator.wikimedia.org/T199029WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan