Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-8002

Fixed in a distro release EPSS 2%

The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users to cause a denial of service (disk consumption) via a file upload using one byte chunks.

Published 2015-11-09 · CVE record · OSV

Products: mediawiki

Distro releases

ReleasePackageFixed in
Debian 12mediawiki1:1.25.5-1
Debian 13mediawiki1:1.25.5-1
Debian 14mediawiki1:1.25.5-1