Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-8003

Fixed in a distro release EPSS 2%

MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file uploads, which allows remote authenticated users to have unspecified impact via multiple file uploads.

Published 2015-11-09 · CVE record · OSV

Products: mediawiki

Distro releases

ReleasePackageFixed in
Debian 12mediawiki1:1.25.5-1
Debian 13mediawiki1:1.25.5-1
Debian 14mediawiki1:1.25.5-1